Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-43420

Опубликовано: 13 мая 2025
Источник: redhat
CVSS3: 5.6
EPSS Низкий

Описание

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10microcode_ctlNot affected
Red Hat Enterprise Linux 6microcode_ctlFix deferred
Red Hat Enterprise Linux 7.7 Advanced Update Supportmicrocode_ctlFixedRHSA-2025:1011101.07.2025
Red Hat Enterprise Linux 7 Extended Lifecycle Supportmicrocode_ctlFixedRHSA-2025:1010801.07.2025
Red Hat Enterprise Linux 8microcode_ctlFixedRHSA-2025:1099114.07.2025
Red Hat Enterprise Linux 8.2 Advanced Update Supportmicrocode_ctlFixedRHSA-2025:1012601.07.2025
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHSA-2025:1010701.07.2025
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHSA-2025:1010901.07.2025
Red Hat Enterprise Linux 8.6 Telecommunications Update Servicemicrocode_ctlFixedRHSA-2025:1010901.07.2025
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsmicrocode_ctlFixedRHSA-2025:1010901.07.2025

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-1423
https://bugzilla.redhat.com/show_bug.cgi?id=2366159microcode_ctl: Exposure of sensitive information

EPSS

Процентиль: 5%
0.00025
Низкий

5.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.6
ubuntu
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
nvd
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
debian
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural ...

CVSS3: 5.6
github
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
fstec
3 месяца назад

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 5%
0.00025
Низкий

5.6 Medium

CVSS3