VDB
BDU%3A2022-06850
BDU%3A2022-06850
PUBLISHED
CVSS 3.799999952316284 LOW
Уязвимость реализации механизма Indirect Branch Prediction Barrier (IBPB) микропрограммного обеспечения процессоров AMD, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
3.799999952316284
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp, Red Hat Inc., Novell Inc., Advanced Micro Devices Inc., The Linux Foundation, АО "НППКТ" | Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1, Windows 10, Windows 10 1607, Red Hat Enterprise Linux, Windows Server 2016, Windows RT 8.1, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows 10 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, SUSE Enterprise Storage, SUSE OpenStack Cloud, SUSE OpenStack Cloud Crowbar, SUSE Linux Enterprise High Performance Computing, SUSE CaaS Platform, Windows 10 20H2, SUSE Linux Enterprise Module for Basesystem, Windows 10 21H1, SUSE Linux Enterprise Module for Server Applications, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 11, Windows 10 21H2, SUSE Manager Proxy, SUSE Manager Server, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Micro, SUSE Manager Retail Branch Server, 1st Gen AMD EPYC, 2nd Gen AMD EPYC, 3rd Gen AMD EPYC, AMD Ryzen 2000 series Desktop, AMD Ryzen 3000 Series Desktop, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, 2nd Gen AMD Ryzen Threadripper, 3rd Gen AMD Ryzen Threadripper, AMD Ryzen Threadripper PRO processors, AMD Athlon 3000 Series Mobile processors with Radeon graphics, AMD Ryzen 2000 Series Mobile processor, 2nd Gen AMD Ryzen Mobile processor with Radeon graphics, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Athlon Mobile processor with Radeon graphics, AMD Athlon X4 processor, SUSE Linux Enterprise Server Business Critical Linux, Windows 11 22H2, Windows 10 22H2, Xen, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Windows Server 2012 (Server Core installation) |
Timeline
- Nov 21, 2022 CVE Published
- Sep 13, 2023 CVE Updated
- Mar 19, 2026 Security Advisory
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-https://www.cybersecurity-help.cz/vdb/SB2022110914 url
- https://access.redhat.com/security/cve/cve-2022-23824 url
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2119127 url
- https://xenbits.xen.org/xsa/advisory-422.html url
- https://seclists.org/oss-sec/2022/q4/135 url
- https://www.suse.com/de-de/security/cve/CVE-2022-23824.html url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.8/ url
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23824 advisory
- https://www.amd.com/system/files/documents/software-techniques-for-managing-speculation.pdf advisory