CVE-2023-3006

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
May 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-300617.5D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.CVE-2023-300637.5D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.CVE-2023-300658.8MitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b32 was discovered to contain a remote code execution (RCE) vulnerability in the CVE-2023-30079.8A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknownCVE-2023-300769.8Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.php=&se_name=&sub_evCVE-2023-300779.8Judging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/review_result.php?mainevent_id=, mainCVE-2023-30089.8A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file CVE-2023-300827.5A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is suppliedCVE-2023-300835.5Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in utiCVE-2023-300845.5An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.CVE-2023-300855.5Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws functioCVE-2023-300865.5Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffc