Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Una limpieza incompleta de los búferes de relleno de la microarquitectura en algunos procesadores Intel(R) puede permitir que un usuario autenticado permita potencialmente la divulgación de información por medio del acceso local
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:L/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-459
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-459
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| xen | xen | * | <built-in method update of dict object at 0x7fd36010a2c0> | Operating System |
| fedoraproject | fedora | 35 | <built-in method update of dict object at 0x7fd384e9b840> | Operating System |
| fedoraproject | fedora | 36 | <built-in method update of dict object at 0x7fd3854bc4c0> | Operating System |
| intel | sgx_dcap | * | <built-in method update of dict object at 0x7fd384e9a000> | Application |
| intel | sgx_dcap | * | <built-in method update of dict object at 0x7fd360109680> | Application |
| intel | sgx_psw | * | <built-in method update of dict object at 0x7fd360109040> | Application |
| intel | sgx_psw | * | <built-in method update of dict object at 0x7fd3843e6b40> | Application |
| intel | sgx_sdk | * | <built-in method update of dict object at 0x7fd369404780> | Application |
| intel | sgx_sdk | * | <built-in method update of dict object at 0x7fd3854bf200> | Application |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3601094c0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd341038800> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd36b434800> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd39c4a79c0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2a159c7c0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd384e9a880> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd38672c7c0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbc45600> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2dbc46b00> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd385614440> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd37018ed00> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd385617b40> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd36b435500> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd3853fa100> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd369405b40> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7fd2d24941c0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:linux:*:* |
| Yes | cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:linux:*:* |
| Yes | cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:linux:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |