Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-45332

Опубликовано: 13 мая 2025
Источник: redhat
CVSS3: 5.6
EPSS Низкий

Описание

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Отчет

Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10microcode_ctlNot affected
Red Hat Enterprise Linux 6microcode_ctlFix deferred
Red Hat Enterprise Linux 7.7 Advanced Update Supportmicrocode_ctlFixedRHSA-2025:1011101.07.2025
Red Hat Enterprise Linux 7 Extended Lifecycle Supportmicrocode_ctlFixedRHSA-2025:1010801.07.2025
Red Hat Enterprise Linux 8microcode_ctlFixedRHSA-2025:1099114.07.2025
Red Hat Enterprise Linux 8.2 Advanced Update Supportmicrocode_ctlFixedRHSA-2025:1012601.07.2025
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHSA-2025:1010701.07.2025
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHSA-2025:1010901.07.2025
Red Hat Enterprise Linux 8.6 Telecommunications Update Servicemicrocode_ctlFixedRHSA-2025:1010901.07.2025
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsmicrocode_ctlFixedRHSA-2025:1010901.07.2025

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-1423
https://bugzilla.redhat.com/show_bug.cgi?id=2366162microcode_ctl: Exposure of sensitive information

EPSS

Процентиль: 4%
0.00021
Низкий

5.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.6
ubuntu
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
nvd
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
debian
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural ...

CVSS3: 5.6
github
3 месяца назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
fstec
11 месяцев назад

Уязвимость компонентов Branch Target Buffer (BTB) и Indirect Branch Predictor (IBP) микропрограммного обеспечения процессоров Intel, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 4%
0.00021
Низкий

5.6 Medium

CVSS3