Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2022-29900

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

VectorLOCAL

PublishedJul 12, 2022, 19:15

Published Bypsirt@amd.com

Base Score

Score6.5

Affected Versions

No affected versions found.

References

https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
https://security.gentoo.org/glsa/202402-07
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037
https://www.debian.org/security/2022/dsa-5207
https://www.secpod.com/blog/retbleed-intel-and-amd-processor-information-disclosure-vulnerability/

Weakness Type

CWE-212

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL