CVE-2022-21233 — Sensitive Information Exposure in Intel-microcode

CWE-200 — Sensitive Information Exposure6 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 69.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Intel-microcode
Timeline
PublishedAug 18
Latest updateJun 15

Description

Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

▶debiandebian/intel-microcode< intel-microcode 3.20220809.1 (bookworm)

🔴Vulnerability Details

1
OSV
CVE-2022-21233: Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local↗2022-08-18
▶

📋Vendor Advisories

4
CISA ICS
Siemens SIMATIC S7-1500 TM MFP BIOS↗2023-06-15
▶
Ubuntu
Intel Microcode vulnerability↗2022-09-15
▶
Red Hat
hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability↗2022-08-09
▶
Debian
CVE-2022-21233: intel-microcode - Improper isolation of shared resources in some Intel(R) Processors may allow a p...↗2022
▶