VMware ESXi: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Summary

Product

Vulnerabilities 4

• Medium 5.6
  CVE-2022-29901

  Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

  Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…

  Intel Intel Microprocessors linux-raspi2 linux-hwe Debian Ubuntu
  Jul 12, 2022
• Medium 4.7
  CVE-2022-28693

  Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized …

  linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  Feb 14, 2025
• Unscored —
  CVE-2022-23816 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

  linux-hwe linux-azure linux-riscv linux-gcp Ubuntu Alpine
  Jan 21, 2022
• Unscored —
  CVE-2022-23825

  Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

  AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jul 14, 2022

Revision history

1. 2023-03-29 #4

   Neue Updates von IBM aufgenommen

2. 2022-12-13 #3

   Neue Updates von Red Hat aufgenommen

3. 2022-07-24 #2

   Referenz(en) aufgenommen: FEDORA-2022-7BC84AE2CC

4. 2022-07-12 #1

   Initiale Fassung

References

• IBM Security Bulletin 6967016 vom 2023-03-29
  https://www.ibm.com/support/pages/node/6967016
• VMWare Security Advisory VMSA-2022-0020 vom 2022-07-12
  https://www.vmware.com/security/advisories/VMSA-2022-0020.html
• Red Hat Security Advisory RHSA-2022:8973 vom 2022-12-13
  https://access.redhat.com/errata/RHSA-2022:8973
• Red Hat Bug-Tracker 2090226 vom 2022-12-13
  https://access.redhat.com/errata/RHSA-2022:8974