Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
citrixCitrixCTX461397
HistoryJul 12, 2022 - 4:49 p.m.

Citrix Hypervisor Security Bulletin for CVE-2022-23825 and CVE-2022-29900

2022-07-1216:49:54
support.citrix.com
43
citrix hypervisor
security bulletin
cve-2022-23825
cve-2022-29900
amd cpu
ram inference
hotfixes
product changes
mitigation
software

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.001

Percentile

23.1%

JSON

AMD has disclosed an issue that affects AMD CPU hardware and may allow code inside a guest VM to infer the contents of RAM memory elsewhere on the host. Although this is not an issue in the Citrix Hypervisor product itself, Citrix is releasing hotfixes that include product changes to mitigate this CPU hardware issue.

This issue has the following two CVE identifiers:

  • CVE-2022-23825
  • CVE-2022-29900

Related

openvas 38
fedora 4
hp 1
amd 1
nessus 56
xen 2
ubuntucve 2
cvelist 2
redhatcve 3
veracode 2
cve 2
prion 2
osv 17
mscve 2
debiancve 2
nvd 2
mageia 2
oraclelinux 7
almalinux 4
rocky 2
redhat 11
ibm 2
f5 2
redos 1
debian 3
thn 2
suse 10
vmware 3
ubuntu 6
photon 2
mskb 4
openvas
openvas
Fedora: Security Advisory for xen (FEDORA-2022-3e6ce58029)
2022-07-19 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-c69ef9c1dd)
2022-07-15 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-8aab5b5cde)
2022-07-16 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: xen-4.16.1-6.fc36
2022-07-18 01:09:01
[SECURITY] Fedora 36 Update: kernel-5.18.11-200.fc36
2022-07-14 01:49:14
[SECURITY] Fedora 35 Update: kernel-5.18.11-100.fc35
2022-07-15 01:37:00
hp
hp
HP Wolf Security Software July 2022 Update
2022-07-12 00:00:00
amd
amd
AMD CPU Branch Type Confusion
2022-07-12 00:00:00
nessus
nessus
Fedora 36 : kernel (2022-c69ef9c1dd)
2022-07-14 00:00:00
Oracle Linux 7 : kernel (ELSA-2022-7337)
2022-11-03 00:00:00
Photon OS 3.0: Linux PHSA-2023-3.0-0528
2024-07-24 00:00:00
xen
xen
Retbleed - arbitrary speculative code execution with return instructions
2022-07-12 16:35:00
x86: Multiple speculative security issues
2022-11-08 17:34:00
ubuntucve
ubuntucve
CVE-2022-23825
2022-07-12 00:00:00
CVE-2022-29900
2022-07-12 00:00:00
cvelist
cvelist
CVE-2022-23825
2022-07-14 19:27:08
CVE-2022-29900
2022-07-12 15:50:10
redhatcve
redhatcve
CVE-2022-23825
2022-07-13 05:14:11
CVE-2022-29900
2022-07-13 04:44:10
CVE-2022-23824
2022-11-09 12:26:05
veracode
veracode
Information Disclosure
2022-07-15 01:44:11
Arbitrary Code Execution
2022-07-14 20:38:30
cve
cve
CVE-2022-23825
2022-07-14 20:15:08
CVE-2022-29900
2022-07-12 19:15:08
prion
prion
Information disclosure
2022-07-14 20:15:00
Design/Logic Flaw
2022-07-12 19:15:00
osv
osv
CVE-2022-23825
2022-07-14 20:15:08
CVE-2022-29900
2022-07-12 19:15:08
Important: kernel-rt security and bug fix update
2022-10-25 00:00:00
mscve
mscve
AMD: CVE-2022-23825 AMD CPU Branch Type Confusion
2022-07-12 07:00:00
AMD: CVE-2022-29900 AMD CPU Branch Type Confusion
2022-07-12 07:00:00
debiancve
debiancve
CVE-2022-23825
2022-07-14 20:15:08
CVE-2022-29900
2022-07-12 19:15:08
nvd
nvd
CVE-2022-23825
2022-07-14 20:15:08
CVE-2022-29900
2022-07-12 19:15:08
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2022-08-06 18:43:47
Updated kernel packages fix security vulnerabilities
2022-08-06 18:43:47
oraclelinux
oraclelinux
kernel security and bug fix update
2022-11-03 00:00:00
kernel security, bug fix, and enhancement update
2022-10-26 00:00:00
Unbreakable Enterprise kernel-container security update
2024-02-12 00:00:00
almalinux
almalinux
Important: kernel-rt security and bug fix update
2022-10-25 00:00:00
Important: kernel security, bug fix, and enhancement update
2022-10-25 00:00:00
Moderate: kernel security, bug fix, and enhancement update
2022-11-15 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2022-10-25 07:38:43
kernel security, bug fix, and enhancement update
2022-10-25 07:23:52
redhat
redhat
(RHSA-2022:7337) Important: kernel security and bug fix update
2022-11-02 16:03:50
(RHSA-2022:7338) Important: kernel-rt security and bug fix update
2022-11-02 16:04:02
(RHSA-2022:7134) Important: kernel-rt security and bug fix update
2022-10-25 07:38:43
ibm
ibm
Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2023-03-29 18:49:02
Security Bulletin: Multiple vulnerabilities in VMware ESXi affect IBM Cloud Pak System
2023-03-31 16:13:36
f5
f5
K57185580 : RetBleed CPU vulnerability CVE-2022-29900
2022-08-02 00:00:00
K83713003 : RetBleed CPU vulnerability CVE-2022-29901
2022-08-02 00:00:00
redos
redos
ROS-20240911-11
2024-09-11 00:00:00
debian
debian
[SECURITY] [DSA 5184-1] xen security update
2022-07-15 18:05:47
[SECURITY] [DSA 5207-1] linux security update
2022-08-15 19:52:20
[SECURITY] [DLA 3102-1] linux-5.10 new package
2022-09-11 19:35:03
thn
thn
New 'Retbleed' Speculative Execution Attack Affects AMD and Intel CPUs
2022-07-13 14:22:00
Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs
2023-08-09 15:39:00
suse
suse
Security update for xen (important)
2022-09-01 00:00:00
Security update for xen (important)
2022-07-29 00:00:00
Security update for xen (important)
2022-07-29 00:00:00
vmware
vmware
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
2022-07-12 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-08-10 00:00:00
Linux kernel vulnerabilities
2022-08-10 00:00:00
Linux kernel (Qualcomm Snapdragon) vulnerabilities
2023-02-09 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0528
2023-02-08 00:00:00
Important Photon OS Security Update - PHSA-2022-0248
2022-09-20 00:00:00
mskb
mskb
March 14, 2023—KB5023754 (Security-only update)
2023-03-14 07:00:00
March 14, 2023—KB5023755 (Monthly Rollup)
2023-03-14 07:00:00
March 14, 2023—KB5023759 (Security-only update)
2023-03-14 07:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.001

Percentile

23.1%

JSON
Related for CTX461397
openvas38fedora4hp1amd1nessus56xen2ubuntucve2cvelist2redhatcve3veracode2cve2prion2osv17mscve2debiancve2nvd2mageia2oraclelinux7almalinux4rocky2redhat11ibm2f52redos1debian3thn2suse10vmware3ubuntu6photon2mskb4