Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-37459

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.

Published

2022-08-17T13:15:08.433

Last Modified

2024-11-21T07:15:01.300

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
CWE-203

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	amperecomputing	ampere_altra_firmware	< 1.08g	Yes
Hardware	amperecomputing	ampere_altra	-	No
Operating System	amperecomputing	ampere_altra_max_firmware	< 2.05a	Yes
Hardware	amperecomputing	ampere_altra_max	-	No

References

https://amperecomputing.com/products/security-bulletins/retbleed.html Vendor Advisory ([email protected])
https://developer.arm.com/documentation/ka005138/1-0/ Third Party Advisory ([email protected])
https://amperecomputing.com/products/security-bulletins/retbleed.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://developer.arm.com/documentation/ka005138/1-0/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)