Information Disclosure

2021-01-0719:15:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.6%

JSON

linux is vulnerable to information disclosure. The AMD extension to the “hwmon” service allows an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show perform side channel attacks and potentially obtain confidential information.

CPENameOperatorVersion
linux-aws:groovyeq5.8.0.1013.15
linux-aws:groovyeq5.8.0.1010.12
linux-aws:groovyeq5.8.0.1004.5
linux-aws:groovyeq5.8.0.1014.16
linux-aws:groovyeq5.4.0.1021.23
linux-aws:groovyeq5.8.0.1005.6
linux-kvm:groovyeq5.8.0.1010.11
linux-kvm:groovyeq5.8.0.1008.9
linux-kvm:groovyeq5.8.0.1009.10
linux-kvm:groovyeq5.8.0.1002.3

Name	Operator	Version
linux-aws:groovy	eq	5.8.0.1013.15
linux-aws:groovy	eq	5.8.0.1010.12
linux-aws:groovy	eq	5.8.0.1004.5
linux-aws:groovy	eq	5.8.0.1014.16
linux-aws:groovy	eq	5.4.0.1021.23
linux-aws:groovy	eq	5.8.0.1005.6
linux-kvm:groovy	eq	5.8.0.1010.11
linux-kvm:groovy	eq	5.8.0.1008.9
linux-kvm:groovy	eq	5.8.0.1009.10
linux-kvm:groovy	eq	5.8.0.1002.3