Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-45332

Опубликовано: 13 мая 2025
Источник: redhat
CVSS3: 5.6

Описание

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Отчет

Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10microcode_ctlNot affected
Red Hat Enterprise Linux 6microcode_ctlFix deferred
Red Hat Enterprise Linux 7.7 Advanced Update Supportmicrocode_ctlFixedRHSA-2025:1011101.07.2025
Red Hat Enterprise Linux 7 Extended Lifecycle Supportmicrocode_ctlFixedRHSA-2025:1010801.07.2025
Red Hat Enterprise Linux 8microcode_ctlFixedRHSA-2025:1099114.07.2025
Red Hat Enterprise Linux 8.2 Advanced Update Supportmicrocode_ctlFixedRHSA-2025:1012601.07.2025
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHSA-2025:1010701.07.2025
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHSA-2025:1010901.07.2025
Red Hat Enterprise Linux 8.6 Telecommunications Update Servicemicrocode_ctlFixedRHSA-2025:1010901.07.2025
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsmicrocode_ctlFixedRHSA-2025:1010901.07.2025

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-1423
https://bugzilla.redhat.com/show_bug.cgi?id=2366162microcode_ctl: Exposure of sensitive information

5.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.6
ubuntu
11 месяцев назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
nvd
11 месяцев назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
debian
11 месяцев назад

Exposure of sensitive information caused by shared microarchitectural ...

CVSS3: 5.6
github
11 месяцев назад

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.6
fstec
больше 1 года назад

Уязвимость компонентов Branch Target Buffer (BTB) и Indirect Branch Predictor (IBP) микропрограммного обеспечения процессоров Intel, позволяющая нарушителю раскрыть защищаемую информацию

5.6 Medium

CVSS3