Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2022/06/16/1 | Mailing List Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20220624-0008/ | Third Party Advisory |
| https://www.debian.org/security/2022/dsa-5178 | Third Party Advisory |
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
31 Jan 2023, 17:27
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
|
| First Time |
Debian
Debian debian Linux |
|
| References | (DEBIAN) https://www.debian.org/security/2022/dsa-5178 - Third Party Advisory |
07 Jul 2022, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
26 Jun 2022, 03:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MLIST) http://www.openwall.com/lists/oss-security/2022/06/16/1 - Mailing List, Patch, Third Party Advisory | |
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20220624-0008/ - Third Party Advisory | |
| References | (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html - Patch, Vendor Advisory | |
| CWE | CWE-459 | |
| CPE | cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:linux:*:* cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:windows:*:* cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:linux:*:* cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:linux:*:* cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:* cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:windows:*:* cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:windows:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
| First Time |
Intel sgx Sdk
Xen xen Intel Xen Intel sgx Dcap Intel sgx Psw |
24 Jun 2022, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jun 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 Jun 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-15 20:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-21127
Mitre link : CVE-2022-21127
CVE.ORG link : CVE-2022-21127
JSON object : View
Products Affected
debian
- debian_linux
intel
- sgx_psw
- sgx_sdk
- sgx_dcap
xen
- xen
CWE
CWE-459
Incomplete Cleanup