CVE-2022-21125CWE-459

CVE-2022-21125

Medium · published June 16, 2022

CVSS v3.1
5.5
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.06451 · 93.7th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2022-06-16T00:15Z
Affected products (25)
ProductVersionsFixed in
xen/xenall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
intel/sgx_dcap< 1.14.100.31.14.100.3
intel/sgx_dcap< 1.14.100.31.14.100.3
intel/sgx_psw< 2.16.100.32.16.100.3
intel/sgx_psw< 2.17.100.32.17.100.3
intel/sgx_sdk< 2.16.100.32.16.100.3
intel/sgx_sdk< 2.17.100.32.17.100.3
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (27)
http://www.openwall.com/lists/oss-security/2022/06/16/1 · [email protected]http://xenbits.xen.org/xsa/advisory-404.html · [email protected]https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/ · [email protected]https://security.gentoo.org/glsa/202208-23 · [email protected]https://security.netapp.com/advisory/ntap-20220624-0008/ · [email protected]https://www.debian.org/security/2022/dsa-5173 · [email protected]https://www.debian.org/security/2022/dsa-5178 · [email protected]https://www.debian.org/security/2022/dsa-5184 · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html · [email protected]http://www.openwall.com/lists/oss-security/2022/06/16/1 · af854a3a-2127-422b-91ae-364da2661108http://xenbits.xen.org/xsa/advisory-404.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/ · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202208-23 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20220624-0008/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5173 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5178 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5184 · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 15 JUN 20:01Z
    Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
    cvelistv5