Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Una limpieza incompleta de los búferes compartidos multinúcleo en algunos procesadores Intel(R) puede permitir que un usuario autenticado permita potencialmente la divulgación de información por medio del acceso local
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:L/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-459
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-459
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| xen | xen | * | <built-in method update of dict object at 0x7fd2dbd9edc0> | Operating System |
| fedoraproject | fedora | 35 | <built-in method update of dict object at 0x7fd36a003300> | Operating System |
| fedoraproject | fedora | 36 | <built-in method update of dict object at 0x7fd2dbd9eec0> | Operating System |
| intel | sgx_dcap | * | <built-in method update of dict object at 0x7fd2dbe95880> | Application |
| intel | sgx_dcap | * | <built-in method update of dict object at 0x7fd2dbd9d740> | Application |
| intel | sgx_psw | * | <built-in method update of dict object at 0x7fd2dbd9f380> | Application |
| intel | sgx_psw | * | <built-in method update of dict object at 0x7fd369c05300> | Application |
| intel | sgx_sdk | * | <built-in method update of dict object at 0x7fd2dbe96d80> | Application |
| intel | sgx_sdk | * | <built-in method update of dict object at 0x7fd36b184500> | Application |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbd9db00> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbe94d80> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd39c446cc0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbd9d300> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2d81111c0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbe97f00> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2d8113e40> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbd9d540> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbe95cc0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2d8113440> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3686d2680> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbe94640> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbd9c600> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd36b184440> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd2dbe97740> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7fd3686d3040> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:linux:*:* |
| Yes | cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:linux:*:* |
| Yes | cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:linux:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |