CVE-2022-0001

Summary

Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Affected Software

Weaknesses

• information disclosure

ADP Enrichment

CVE Program Container

Additional References

• https://www.vicarius.io/vsociety/posts/cve-2022-0001-detect-specter-vulnerability?prevUrl=wizard
• https://www.vicarius.io/vsociety/posts/cve-2022-0001-mitigate-specter-vulnerability?prevUrl=wizard
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html
• http://www.openwall.com/lists/oss-security/2022/03/18/2
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://security.netapp.com/advisory/ntap-20220818-0004/
• https://www.kb.cert.org/vuls/id/155143

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html
• http://www.openwall.com/lists/oss-security/2022/03/18/2
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://security.netapp.com/advisory/ntap-20220818-0004/
• https://www.kb.cert.org/vuls/id/155143

• ←Previous
• Next→