CVE-2021-26314

Опубликовано: 09 июн. 2021

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.

Ссылки

http://www.openwall.com/lists/oss-security/2021/06/09/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/06/10/1
Exploit
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003
Vendor Advisory
http://www.openwall.com/lists/oss-security/2021/06/09/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/06/10/1
Exploit
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:amd:ryzen_5_5600x:-:*:*:*:*:*:*:*

cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:*

cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:h:arm:cortex-a72:-:*:*:*:*:*:*:*

cpe:2.3:h:broadcom:bcm2711:-:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:h:intel:core_i7-10700k:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:core_i7-7700k:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:core_i9-9900k:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_silver_4214:-:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00096

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-208

CWE-203

Связанные уязвимости

CVE-2021-26314

CVSS3: 5.5

ubuntu

больше 4 лет назад

CVE-2021-26314

CVSS3: 5.5

debian

больше 4 лет назад

Potential floating point value injection in all supported CPU products ...

GHSA-92cv-8jc7-jrpm

CVSS3: 5.5

github

больше 3 лет назад

EPSS

Процентиль: 27%

0.00096

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-208

CWE-203