CVE-2022-34632

Опубликовано: 18 июл. 2022

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala.

Ссылки

https://github.com/chipsalliance/rocket-chip/pull/2950#issuecomment-1106745660
Issue Tracking
Patch
Third Party Advisory
https://github.com/chipsalliance/rocket-chip/pull/2950#issuecomment-1107055607
Issue Tracking
Patch
Third Party Advisory
https://github.com/chipsalliance/rocket-chip/pull/2950/commits/4f8114374d8824dfdec03f576a8cd68bebce4e56
Patch
Third Party Advisory
https://github.com/chipsalliance/rocket-chip/pull/2950#issuecomment-1106745660
Issue Tracking
Patch
Third Party Advisory
https://github.com/chipsalliance/rocket-chip/pull/2950#issuecomment-1107055607
Issue Tracking
Patch
Third Party Advisory
https://github.com/chipsalliance/rocket-chip/pull/2950/commits/4f8114374d8824dfdec03f576a8cd68bebce4e56
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linuxfoundation:rocket_chip_generator:-:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00158

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-327

Связанные уязвимости

GHSA-hg7j-9h3g-36x3