CVE-2021-26314

{"id": "CVE-2021-26314", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2021-06-09T12:15:07.810", "references": [{"url": "http://www.openwall.com/lists/oss-security/2021/06/09/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "psirt@amd.com"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/10/1", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "psirt@amd.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/", "source": "psirt@amd.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/", "source": "psirt@amd.com"}, {"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003", "tags": ["Vendor Advisory"], "source": "psirt@amd.com"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/09/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/10/1", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@amd.com", "description": [{"lang": "en", "value": "CWE-208"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-203"}]}], "descriptions": [{"lang": "en", "value": "Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage."}, {"lang": "es", "value": "Una inyecci\u00f3n de valor de punto flotante potencial en todos los productos de CPU compatibles, junto con las vulnerabilidades de software relacionadas con la ejecuci\u00f3n especulativa con resultados de punto flotante incorrectos, puede causar el uso de datos incorrectos de FPVI y puede resultar en una filtraci\u00f3n de datos"}], "lastModified": "2024-11-21T05:56:04.547", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2B9CCC2-BAC5-4A65-B8D4-4B71EBBA0C2F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:ryzen_5_5600x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6FD86A5C-A9A9-4C84-91D9-54F2516E8487"}, {"criteria": "cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CD6DE86B-DAAA-4A3B-9FFF-0583D5CB1B1E"}, {"criteria": "cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B1B5369B-DFFE-4A84-8894-513AE7FC7C6C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:arm:cortex-a72:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16E23102-964E-485D-8EFF-4B1BBFE6EDE4"}, {"criteria": "cpe:2.3:h:broadcom:bcm2711:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DC0C7D8-18F4-43B4-A8CA-8183022DF0FB"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:core_i7-10700k:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CC9312B-40A7-4D4A-A61C-3BA865C29F63"}, {"criteria": "cpe:2.3:h:intel:core_i7-7700k:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "913BBEFF-49E7-42AF-A850-B49E5A12AB98"}, {"criteria": "cpe:2.3:h:intel:core_i9-9900k:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C3257F5-CA55-4F35-9D09-5B85253DE786"}, {"criteria": "cpe:2.3:h:intel:xeon_silver_4214:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1B4F7FE-61A3-417A-BAA9-E686A76F3A94"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@amd.com"}