An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation." To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application. The security update addresses the vulnerability by bypassing the speculative execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8Upgrade openjdk11Upgrade openjdk7 | Oct 22, 2020 | Aug 17, 2020 |
| Msft | — | 2020-08 Cumulative Update for Microsoft Windows 10, version 2004 (KB4566782)2020-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4565351)2020-08 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4566782)2020-08 Cumulative Update for Microsoft Windows 10, version 1909 (KB4565351)2020-08 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4565351)2020-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4565349)2020-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4565351) | Aug 11, 2020 | Aug 11, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub