CVE-2022-37459 Other in n/a

What is CVE-2022-37459?

CVE-2022-37459 is a high-severity vulnerability in n/a, published on 17 Aug 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.

Weakness: CWE-203

Which versions are affected by CVE-2022-37459?

It affects 2 products.

Products include Amperecomputing Ampere Altra Firmware, Amperecomputing Ampere Altra Max Firmware.

How do I fix CVE-2022-37459?

No fix has been published for CVE-2022-37459 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-37459 being exploited?

There is no known exploitation of CVE-2022-37459 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2022-46892 Security feature bypass in n/a Critical 9.8
• CVE-2022-32295 Security feature bypass in n/a Critical 9.8
• CVE-2021-45454 Information disclosure in n/a High 7.5
• CVE-2022-35888 Information disclosure in n/a Medium 6.5
• CVE-2022-25368 Information disclosure in n/a Medium 4.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gp65-59gv-vqpf.