Vulnerability Bulletins

CVE-2022-40982 - Gather Data Sampling - Downfall


System information

   
Affected software AmazonWS

Description

Publication Date: 2023/08/08 1:00 PM PDT AWS is aware of CVE-2022-40982, also known as “Gather Data Sampling” (GDS) or “Downfall”. AWS customers’ data and instances are not affected by this issue, and no customer action is required. AWS has designed and implemented its infrastructure with protections against this class of issues. Amazon EC2 instances, including Lambda, Fargate, and other AWS-managed compute and container services protect customer data against GDS

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2023-007/

Standar resources

Property Value
CVE CVE-2022-40982.

Version history

Version Comments Date
1.0 Advisory issued 2023-08-09
Ministerio de Defensa
CNI
CCN
CCN-CERT