Vulnerability Bulletins

VMware Response to Gather Data Sampling (GDS) – Transient Execution Side-channel vulnerability impacting Intel processors (CVE-2022-40982)


System information

   
Affected software VMWare

Description

Greetings from the VMware Security Response Center! On August 8th, 2023, a transient execution side-channel vulnerability impacting Intel processors was disclosed in INTEL-SA-00828. Described as Gather Data Sampling (GDS) and identified by CVE-2022-40982, this vulnerability has been classified as Moderate in severity with a CVSSv3.1 base score of 6.5. VMware hypervisors may be impacted by … ContinuedThe post VMware Response to Gather Data Sampling (GDS) – Transient Execution

More info:

https://blogs.vmware.com/security/2023/08/cve-2022-40982.html?utm_source=rss&utm_medium=rss&utm_campaign=cve-2022-40982

Standar resources

Property Value
CVE CVE-2022-40982 and CVE-2023-29552.

Version history

Version Comments Date
1.0 Advisory issued 2023-08-09
Ministerio de Defensa
CNI
CCN
CCN-CERT