Prozessoren: Schwachstelle ermöglicht Offenlegung von Informationen und Umgehung von Kryptografie

Summary

Product

Vulnerabilities 2

• Medium 6.5
  CVE-2022-24436 EPSS 12%

  Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to po…

  Jun 15, 2022
• Unscored —
  CVE-2022-23823

  A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute…

  AMD AMD Processors
  Jun 15, 2022

Revision history

1. 2025-02-06 #2

   Neue Updates von F5 aufgenommen

2. 2022-06-14 #1

   Initiale Fassung

References

• Hertzbleed Attack Webseite vom 2022-06-14
  https://www.hertzbleed.com/
• AMD Security Bulletin AMD-SB-1038 vom 2022-06-14
  https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1038
• Intel Security Advisory INTEL-SA-00698 vom 2022-06-14
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00698.html
• Hertzbleed PoC
  https://github.com/FPSG-UIUC/hertzbleed
• Lenovo Security Advisory
  https://support.lenovo.com/de/de/product_security/ps500001-lenovo-product-security-advisories
• F5 Security Advisory K14335949 vom 2025-02-06
  https://my.f5.com/manage/s/article/K14335949
• F5 Security Advisory K43357358 vom 2025-02-06
  https://my.f5.com/manage/s/article/K43357358