Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2017-15031 →

DEBIAN-CVE-2017-15031

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world tim...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world timing information.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 arm-trusted-firmware

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 arm-trusted-firmware

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 arm-trusted-firmware

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.16+dfsg-1"}]}]

Références

advisory security-tracker.debian.org