Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-42331

Опубликовано: 21 мар. 2023
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*
Версия от 4.5.0 (включая) до 4.17.0 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

EPSS

Процентиль: 14%
0.00046
Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 3 года назад

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.

CVSS3: 5.5
debian
почти 3 года назад

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversig ...

CVSS3: 5.5
github
почти 3 года назад

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.

suse-cvrf
почти 3 года назад

Security update for xen

suse-cvrf
почти 3 года назад

Security update for xen

EPSS

Процентиль: 14%
0.00046
Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo