Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-8698 (GCVE-0-2020-8698)
Vulnerability from cvelistv5 – Published: 2020-11-12 18:01 – Updated: 2024-08-04 10:03- information disclosure
| URL | Tags |
|---|---|
| https://www.intel.com/content/www/us/en/security-… | x_refsource_MISC |
| https://security.netapp.com/advisory/ntap-2020111… | x_refsource_CONFIRM |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.debian.org/debian-lts-announce/2021… | mailing-listx_refsource_MLIST |
| https://cert-portal.siemens.com/productcert/pdf/s… | x_refsource_CONFIRM |
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Intel(R) Processors |
Affected:
See references
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:03:46.326Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20201113-0006/"
},
{
"name": "FEDORA-2020-14fda1bf85",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/"
},
{
"name": "[debian-lts-announce] 20210205 [SECURITY] [DLA 2546-1] intel-microcode security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Intel(R) Processors",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "See references"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "information disclosure",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-05-11T12:06:29.000Z",
"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"shortName": "intel"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20201113-0006/"
},
{
"name": "FEDORA-2020-14fda1bf85",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/"
},
{
"name": "[debian-lts-announce] 20210205 [SECURITY] [DLA 2546-1] intel-microcode security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secure@intel.com",
"ID": "CVE-2020-8698",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Intel(R) Processors",
"version": {
"version_data": [
{
"version_value": "See references"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "information disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381",
"refsource": "MISC",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381"
},
{
"name": "https://security.netapp.com/advisory/ntap-20201113-0006/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20201113-0006/"
},
{
"name": "FEDORA-2020-14fda1bf85",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/"
},
{
"name": "[debian-lts-announce] 20210205 [SECURITY] [DLA 2546-1] intel-microcode security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"assignerShortName": "intel",
"cveId": "CVE-2020-8698",
"datePublished": "2020-11-12T18:01:55.000Z",
"dateReserved": "2020-02-06T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:03:46.326Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-8698",
"date": "2026-06-07",
"epss": "0.00248",
"percentile": "0.48278"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:intel:microcode:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B78FF9EC-BB2A-4352-9BE7-EFA749C99A9D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i3-1000g1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6DAA00D4-A8AA-44AA-9609-0A40BD4FB2E0\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i3-1000g4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF64D95C-653A-4864-A572-CD0A64B6CDF3\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i3-1005g1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"30B2F570-1DD9-49C7-BB72-0EA0E9A417C4\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i3-1110g4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2C60AF0D-983D-454E-8940-209C471DC041\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i3-1115g4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F26C6DA-ED6B-444A-A63A-5155FCA4F0DB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i3-1120g4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B0D9B687-C3EE-4AF5-B9BE-7F0698D0F258\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i3-1125g4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"114DF43C-839F-4066-AA30-8DC16B1D6687\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i5-1030g4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F5F6F725-217C-48FF-86DD-E91A24156121\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i5-1030g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"365696BF-CE3D-4CE6-92A8-413DDE43774E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i5-1035g1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE048AEB-094D-4102-9DBF-488FEB53FF89\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i5-1035g4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3907FA31-6F1A-45BA-ACF3-1C8EE05D9BA0\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i5-1035g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D48D9F5F-95BD-4F6B-8A37-D1CAA7D2DB25\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i5-1130g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"158CC66D-32E5-4396-8E5D-4D90EE9AB62C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i5-1135g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E84F0381-296A-408E-90D4-A316EE894A9D\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i7-1060g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B6CDC1BE-6A64-425C-AF2C-7DFB28FB604A\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i7-1065g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2243674B-E505-4FED-B063-953A1569EA30\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i7-1160g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D8F5409D-23C7-4CA9-951C-8EEEAE31DFDE\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i7-1165g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5601E40A-96E1-4321-9682-055A1C607488\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:intel:core_i7-1185g7:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"12ADA9A2-6E64-4F17-B369-816639F0D3BF\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FE996B1-6951-4F85-AA58-B99A379D2163\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:netapp:hci_compute_node_bios:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C61DF9A-ABDE-44A2-A060-B088428D5064\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AD7447BC-F315-4298-A822-549942FC118B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:netapp:hci_storage_node_bios:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"17C3B32E-E1F2-446A-B8AE-5F3E285BD5B2\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"02DEB4FB-A21D-4CB1-B522-EEE5093E8521\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:netapp:solidfire_bios:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C3BCF7CA-6C05-4FD5-A965-0F038F63D70A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:netapp:solidfire:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4588E5F-58E1-4C82-9551-8EAD5FFE08B3\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"22.01.08\", \"matchCriteriaId\": \"F5320759-AAAB-4FEA-99AB-51A7F7EE9F58\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"506DEE00-30D2-4E29-9645-757EB8778C0F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"480C5657-5C05-40F5-B76A-E67119727ED8\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F3C3E60-7C36-4F5D-B454-97C9D0FD9459\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"21.01.15\", \"matchCriteriaId\": \"8F6CA254-45AF-497D-9D1D-0CF4A8922883\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A40D0CDB-7BE6-491F-B730-3B4E10CA159A\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"21.01.15\", \"matchCriteriaId\": \"5AECF7C4-3FF7-4663-A49C-9DB91BA5C28E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDF9D4C3-1892-48FA-95B4-835B636A4005\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"21.01.15\", \"matchCriteriaId\": \"26B17683-E061-4CB9-BB8E-9EC8612DA1A1\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc477e_pro:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FC5CE20-7D08-4496-A857-C3A4BD0AB1AC\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"25.02.08\", \"matchCriteriaId\": \"6779ADD8-298D-4FF4-8AD3-82E995B2E144\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D9AF082-8345-4BE1-B1FC-6E0316BB833B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"25.02.08\", \"matchCriteriaId\": \"5D3BECCA-5783-4B3C-B659-21160B4D2726\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E430C4C5-D887-47C6-B50F-66EEE9519151\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"25.02.08\", \"matchCriteriaId\": \"BF2E9EAA-2D26-4271-B2A3-CA3BB71D0149\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F9FA42D-B2F0-456F-89B7-6A5789787FBA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"25.02.08\", \"matchCriteriaId\": \"9C5CB316-59B9-4DDB-A8B8-14D8BCD991CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1157418C-14C4-43C4-B63E-7E98D868A94F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"23.01.08\", \"matchCriteriaId\": \"4ABF49D4-34CE-4DEA-AA2E-A40A53472D1F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"187C6D51-5B86-484D-AE0F-26D1C9465580\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.\"}, {\"lang\": \"es\", \"value\": \"Un aislamiento inapropiado de los recursos compartidos en algunos Intel\\u00ae Processors, puede habilitar a un usuario autenticado para permitir potencialmente una divulgaci\\u00f3n de informaci\\u00f3n por medio de un acceso local\"}]",
"id": "CVE-2020-8698",
"lastModified": "2024-11-21T05:39:17.130",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:P/I:N/A:N\", \"baseScore\": 2.1, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 3.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2020-11-12T18:15:16.783",
"references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf\", \"source\": \"secure@intel.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html\", \"source\": \"secure@intel.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/\", \"source\": \"secure@intel.com\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20201113-0006/\", \"source\": \"secure@intel.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381\", \"source\": \"secure@intel.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20201113-0006/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "secure@intel.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-668\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-8698\",\"sourceIdentifier\":\"secure@intel.com\",\"published\":\"2020-11-12T18:15:16.783\",\"lastModified\":\"2024-11-21T05:39:17.130\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.\"},{\"lang\":\"es\",\"value\":\"Un aislamiento inapropiado de los recursos compartidos en algunos Intel\u00ae Processors, puede habilitar a un usuario autenticado para permitir potencialmente una divulgaci\u00f3n de informaci\u00f3n por medio de un acceso local\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-668\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:microcode:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B78FF9EC-BB2A-4352-9BE7-EFA749C99A9D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-1000g1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DAA00D4-A8AA-44AA-9609-0A40BD4FB2E0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-1000g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF64D95C-653A-4864-A572-CD0A64B6CDF3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-1005g1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30B2F570-1DD9-49C7-BB72-0EA0E9A417C4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-1110g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C60AF0D-983D-454E-8940-209C471DC041\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-1115g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F26C6DA-ED6B-444A-A63A-5155FCA4F0DB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-1120g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0D9B687-C3EE-4AF5-B9BE-7F0698D0F258\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-1125g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"114DF43C-839F-4066-AA30-8DC16B1D6687\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-1030g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5F6F725-217C-48FF-86DD-E91A24156121\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-1030g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"365696BF-CE3D-4CE6-92A8-413DDE43774E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-1035g1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE048AEB-094D-4102-9DBF-488FEB53FF89\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-1035g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3907FA31-6F1A-45BA-ACF3-1C8EE05D9BA0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-1035g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D48D9F5F-95BD-4F6B-8A37-D1CAA7D2DB25\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-1130g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"158CC66D-32E5-4396-8E5D-4D90EE9AB62C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-1135g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E84F0381-296A-408E-90D4-A316EE894A9D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i7-1060g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6CDC1BE-6A64-425C-AF2C-7DFB28FB604A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i7-1065g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2243674B-E505-4FED-B063-953A1569EA30\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i7-1160g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8F5409D-23C7-4CA9-951C-8EEEAE31DFDE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i7-1165g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5601E40A-96E1-4321-9682-055A1C607488\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i7-1185g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12ADA9A2-6E64-4F17-B369-816639F0D3BF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE996B1-6951-4F85-AA58-B99A379D2163\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:hci_compute_node_bios:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C61DF9A-ABDE-44A2-A060-B088428D5064\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD7447BC-F315-4298-A822-549942FC118B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:hci_storage_node_bios:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17C3B32E-E1F2-446A-B8AE-5F3E285BD5B2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02DEB4FB-A21D-4CB1-B522-EEE5093E8521\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:solidfire_bios:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3BCF7CA-6C05-4FD5-A965-0F038F63D70A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:solidfire:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4588E5F-58E1-4C82-9551-8EAD5FFE08B3\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"22.01.08\",\"matchCriteriaId\":\"F5320759-AAAB-4FEA-99AB-51A7F7EE9F58\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"506DEE00-30D2-4E29-9645-757EB8778C0F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"480C5657-5C05-40F5-B76A-E67119727ED8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F3C3E60-7C36-4F5D-B454-97C9D0FD9459\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"21.01.15\",\"matchCriteriaId\":\"8F6CA254-45AF-497D-9D1D-0CF4A8922883\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A40D0CDB-7BE6-491F-B730-3B4E10CA159A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"21.01.15\",\"matchCriteriaId\":\"5AECF7C4-3FF7-4663-A49C-9DB91BA5C28E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDF9D4C3-1892-48FA-95B4-835B636A4005\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"21.01.15\",\"matchCriteriaId\":\"26B17683-E061-4CB9-BB8E-9EC8612DA1A1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc477e_pro:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FC5CE20-7D08-4496-A857-C3A4BD0AB1AC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"25.02.08\",\"matchCriteriaId\":\"6779ADD8-298D-4FF4-8AD3-82E995B2E144\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D9AF082-8345-4BE1-B1FC-6E0316BB833B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"25.02.08\",\"matchCriteriaId\":\"5D3BECCA-5783-4B3C-B659-21160B4D2726\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E430C4C5-D887-47C6-B50F-66EEE9519151\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"25.02.08\",\"matchCriteriaId\":\"BF2E9EAA-2D26-4271-B2A3-CA3BB71D0149\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F9FA42D-B2F0-456F-89B7-6A5789787FBA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"25.02.08\",\"matchCriteriaId\":\"9C5CB316-59B9-4DDB-A8B8-14D8BCD991CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1157418C-14C4-43C4-B63E-7E98D868A94F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"23.01.08\",\"matchCriteriaId\":\"4ABF49D4-34CE-4DEA-AA2E-A40A53472D1F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"187C6D51-5B86-484D-AE0F-26D1C9465580\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf\",\"source\":\"secure@intel.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html\",\"source\":\"secure@intel.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/\",\"source\":\"secure@intel.com\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20201113-0006/\",\"source\":\"secure@intel.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381\",\"source\":\"secure@intel.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20201113-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
GSD-2020-8698
Vulnerability from gsd - Updated: 2023-12-13 01:21{
"GSD": {
"alias": "CVE-2020-8698",
"description": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"id": "GSD-2020-8698",
"references": [
"https://www.suse.com/security/cve/CVE-2020-8698.html",
"https://access.redhat.com/errata/RHSA-2021:3364",
"https://access.redhat.com/errata/RHSA-2021:3323",
"https://access.redhat.com/errata/RHSA-2021:3322",
"https://access.redhat.com/errata/RHSA-2021:3317",
"https://access.redhat.com/errata/RHSA-2021:3255",
"https://access.redhat.com/errata/RHSA-2021:3176",
"https://access.redhat.com/errata/RHSA-2021:3029",
"https://access.redhat.com/errata/RHSA-2021:3028",
"https://access.redhat.com/errata/RHSA-2021:3027",
"https://access.redhat.com/errata/RHSA-2020:5369",
"https://access.redhat.com/errata/RHSA-2020:5190",
"https://access.redhat.com/errata/RHSA-2020:5189",
"https://access.redhat.com/errata/RHSA-2020:5188",
"https://access.redhat.com/errata/RHSA-2020:5186",
"https://access.redhat.com/errata/RHSA-2020:5185",
"https://access.redhat.com/errata/RHSA-2020:5184",
"https://access.redhat.com/errata/RHSA-2020:5183",
"https://access.redhat.com/errata/RHSA-2020:5182",
"https://access.redhat.com/errata/RHSA-2020:5181",
"https://access.redhat.com/errata/RHSA-2020:5085",
"https://access.redhat.com/errata/RHSA-2020:5084",
"https://access.redhat.com/errata/RHSA-2020:5083",
"https://ubuntu.com/security/CVE-2020-8698",
"https://advisories.mageia.org/CVE-2020-8698.html",
"https://security.archlinux.org/CVE-2020-8698",
"https://linux.oracle.com/cve/CVE-2020-8698.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2020-8698"
],
"details": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"id": "GSD-2020-8698",
"modified": "2023-12-13T01:21:54.192951Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@intel.com",
"ID": "CVE-2020-8698",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Intel(R) Processors",
"version": {
"version_data": [
{
"version_value": "See references"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "information disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381",
"refsource": "MISC",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381"
},
{
"name": "https://security.netapp.com/advisory/ntap-20201113-0006/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20201113-0006/"
},
{
"name": "FEDORA-2020-14fda1bf85",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/"
},
{
"name": "[debian-lts-announce] 20210205 [SECURITY] [DLA 2546-1] intel-microcode security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:intel:microcode:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:intel:core_i3-1000g1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i3-1000g4:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i3-1005g1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i3-1110g4:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i3-1115g4:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i3-1120g4:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i3-1125g4:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i5-1030g4:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i5-1030g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i5-1035g1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i5-1035g4:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i5-1035g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i5-1130g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i5-1135g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i7-1060g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i7-1065g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i7-1160g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i7-1165g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:intel:core_i7-1185g7:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:hci_compute_node_bios:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:hci_storage_node_bios:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:netapp:solidfire_bios:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netapp:solidfire:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "22.01.08",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "21.01.15",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "21.01.15",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "21.01.15",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc477e_pro:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "25.02.08",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "25.02.08",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "25.02.08",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "25.02.08",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "23.01.08",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secure@intel.com",
"ID": "CVE-2020-8698"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-668"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381"
},
{
"name": "https://security.netapp.com/advisory/ntap-20201113-0006/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20201113-0006/"
},
{
"name": "FEDORA-2020-14fda1bf85",
"refsource": "FEDORA",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/"
},
{
"name": "[debian-lts-announce] 20210205 [SECURITY] [DLA 2546-1] intel-microcode security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-04-26T16:33Z",
"publishedDate": "2020-11-12T18:15Z"
}
}
}
ICSA-22-132-05
Vulnerability from csaf_cisa - Published: 2021-05-11 00:00 - Updated: 2022-12-13 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIMATIC Field PG M6
Siemens / SIMATIC Field PG M6
|
<V26.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC527G
Siemens / SIMATIC IPC527G
|
<BIOS_V1.4.0 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC547G
Siemens / SIMATIC IPC547G
|
<R1.30.0 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC627E
Siemens / SIMATIC IPC627E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC647E
Siemens / SIMATIC IPC647E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC677E
Siemens / SIMATIC IPC677E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC847E
Siemens / SIMATIC IPC847E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIMATIC Field PG M5
Siemens / SIMATIC Field PG M5
|
<BIOS_V22.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC Field PG M6
Siemens / SIMATIC Field PG M6
|
<V26.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC427E (incl. SIPLUS variants)
Siemens / SIMATIC IPC427E (incl. SIPLUS variants)
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC477E
Siemens / SIMATIC IPC477E
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC477E Pro
Siemens / SIMATIC IPC477E Pro
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC527G
Siemens / SIMATIC IPC527G
|
<BIOS_V1.4.0 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC547G
Siemens / SIMATIC IPC547G
|
<R1.30.0 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC627E
Siemens / SIMATIC IPC627E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC647E
Siemens / SIMATIC IPC647E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC677E
Siemens / SIMATIC IPC677E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC847E
Siemens / SIMATIC IPC847E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC ITP1000
Siemens / SIMATIC ITP1000
|
<BIOS_V23.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIMATIC Field PG M5
Siemens / SIMATIC Field PG M5
|
<BIOS_V22.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC Field PG M6
Siemens / SIMATIC Field PG M6
|
<V26.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC427E (incl. SIPLUS variants)
Siemens / SIMATIC IPC427E (incl. SIPLUS variants)
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC477E
Siemens / SIMATIC IPC477E
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC477E Pro
Siemens / SIMATIC IPC477E Pro
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC627E
Siemens / SIMATIC IPC627E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC647E
Siemens / SIMATIC IPC647E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC677E
Siemens / SIMATIC IPC677E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC847E
Siemens / SIMATIC IPC847E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC ITP1000
Siemens / SIMATIC ITP1000
|
<BIOS_V23.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIMATIC Drive Controller family
Siemens / SIMATIC Drive Controller family
|
<V05.00.01.00 |
Mitigation
Mitigation
Vendor Fix
|
|
|
SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Siemens / SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
|
<V0209_0105 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC Field PG M5
Siemens / SIMATIC Field PG M5
|
<BIOS_V22.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC Field PG M6
Siemens / SIMATIC Field PG M6
|
<V26.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC127E
Siemens / SIMATIC IPC127E
|
vers:all/* |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC427E (incl. SIPLUS variants)
Siemens / SIMATIC IPC427E (incl. SIPLUS variants)
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC477E
Siemens / SIMATIC IPC477E
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC477E Pro
Siemens / SIMATIC IPC477E Pro
|
<BIOS_V21.01.15 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC527G
Siemens / SIMATIC IPC527G
|
<BIOS_V1.4.0 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC627E
Siemens / SIMATIC IPC627E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC647E
Siemens / SIMATIC IPC647E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC677E
Siemens / SIMATIC IPC677E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC IPC847E
Siemens / SIMATIC IPC847E
|
<BIOS_V25.02.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SIMATIC ITP1000
Siemens / SIMATIC ITP1000
|
<BIOS_V23.01.08 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
|
SINUMERIK 828D HW PU.4
Siemens / SINUMERIK 828D HW PU.4
|
<V08.00.00.00 |
Mitigation
Mitigation
Vendor Fix
|
|
|
SINUMERIK MC MCU 1720
Siemens / SINUMERIK MC MCU 1720
|
<V05.00.00.00 |
Mitigation
Mitigation
Vendor Fix
|
|
|
SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10
Siemens / SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10
|
<V08.00.00.00 |
Mitigation
Mitigation
Vendor Fix
|
|
|
SINUMERIK ONE NCU 1740
Siemens / SINUMERIK ONE NCU 1740
|
<V04.00.00.00 |
Mitigation
Mitigation
Vendor Fix
|
|
|
SINUMERIK ONE PPU 1740
Siemens / SINUMERIK ONE PPU 1740
|
<V06.00.00.00 |
Mitigation
Mitigation
Vendor Fix
|
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting these vulnerabilities to CISA."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "Intel has published information on vulnerabilities in Intel products in \nNovember 2020.\nThis advisory lists the Siemens IPC related products, that are affected by these vulnerabilities.\nIn this advisory we take a representative CVE from each advisory:\n\n- \n\u201cIntel CSME, SPS, TXE, AMT and DAL Advisory\u201d Intel-SA-00391 is represented by CVE-2020-8745\n\n\n- \n\u201cIntel RAPL Interface Advisory\u201d Intel-SA-00389 is represented by CVE-2020-8694\n\n\n- \n\u201cIntel Processor Advisory\u201d Intel-SA-00381 is represented by CVE-2020-8698, and \n\n\n- \n\u201cBIOS Advisory\u201d Intel-SA-00358 is represented by CVE-2020-0590.\n\n\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020) - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-678983.json"
},
{
"category": "self",
"summary": "SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020) - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-678983.txt"
},
{
"category": "self",
"summary": "SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020) - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-05 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-22-132-05.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-05 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-05"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens Industrial PCs and CNC devices",
"tracking": {
"current_release_date": "2022-12-13T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-22-132-05",
"initial_release_date": "2021-05-11T00:00:00.000000Z",
"revision_history": [
{
"date": "2021-05-11T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2021-06-08T00:00:00.000000Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Added remediations for SIMATIC IPC427E, SIMATIC IPC477E (PRO), and SIMATIC IPC527G"
},
{
"date": "2021-08-10T00:00:00.000000Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Added remediations for SIMATIC IPC127E, SINUMERIK 828D HW PU.4, SINUMERIK MC MCU 1720, SINUMERIK ONE NCU 1740 and SINUMERIK ONE PPU 1740, added SIMATIC Drive Controller"
},
{
"date": "2022-03-08T00:00:00.000000Z",
"legacy_version": "1.3",
"number": "4",
"summary": "Added solution for SIMATIC ET 200SP Open Controller CPU 1515SP PC2"
},
{
"date": "2022-05-10T00:00:00.000000Z",
"legacy_version": "1.4",
"number": "5",
"summary": "Added solution for SIMATIC IPC547G"
},
{
"date": "2022-07-12T00:00:00.000000Z",
"legacy_version": "1.5",
"number": "6",
"summary": "Added fix for SIMATIC Field PG M6"
},
{
"date": "2022-12-13T00:00:00.000000Z",
"legacy_version": "1.6",
"number": "7",
"summary": "Added fix for SINUMERIK ONE / 840D sl Handheld Terminal HT 10"
}
],
"status": "final",
"version": "7"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV05.00.01.00",
"product": {
"name": "SIMATIC Drive Controller family",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "SIMATIC Drive Controller family"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV0209_0105",
"product": {
"name": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V22.01.08",
"product": {
"name": "SIMATIC Field PG M5",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "SIMATIC Field PG M5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV26.01.08",
"product": {
"name": "SIMATIC Field PG M6",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "SIMATIC Field PG M6"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC127E",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC127E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V21.01.15",
"product": {
"name": "SIMATIC IPC427E (incl. SIPLUS variants)",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC427E (incl. SIPLUS variants)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V21.01.15",
"product": {
"name": "SIMATIC IPC477E",
"product_id": "CSAFPID-0007"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC477E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V21.01.15",
"product": {
"name": "SIMATIC IPC477E Pro",
"product_id": "CSAFPID-0008"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC477E Pro"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V1.4.0",
"product": {
"name": "SIMATIC IPC527G",
"product_id": "CSAFPID-0009"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC527G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cR1.30.0",
"product": {
"name": "SIMATIC IPC547G",
"product_id": "CSAFPID-0010"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC547G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V25.02.08",
"product": {
"name": "SIMATIC IPC627E",
"product_id": "CSAFPID-0011"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC627E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V25.02.08",
"product": {
"name": "SIMATIC IPC647E",
"product_id": "CSAFPID-0012"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC647E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V25.02.08",
"product": {
"name": "SIMATIC IPC677E",
"product_id": "CSAFPID-0013"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC677E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V25.02.08",
"product": {
"name": "SIMATIC IPC847E",
"product_id": "CSAFPID-0014"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC847E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cBIOS_V23.01.08",
"product": {
"name": "SIMATIC ITP1000",
"product_id": "CSAFPID-0015"
}
}
],
"category": "product_name",
"name": "SIMATIC ITP1000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV08.00.00.00",
"product": {
"name": "SINUMERIK 828D HW PU.4",
"product_id": "CSAFPID-0016"
}
}
],
"category": "product_name",
"name": "SINUMERIK 828D HW PU.4"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV05.00.00.00",
"product": {
"name": "SINUMERIK MC MCU 1720",
"product_id": "CSAFPID-0017"
}
}
],
"category": "product_name",
"name": "SINUMERIK MC MCU 1720"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV08.00.00.00",
"product": {
"name": "SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10",
"product_id": "CSAFPID-0018"
}
}
],
"category": "product_name",
"name": "SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV04.00.00.00",
"product": {
"name": "SINUMERIK ONE NCU 1740",
"product_id": "CSAFPID-0019"
}
}
],
"category": "product_name",
"name": "SINUMERIK ONE NCU 1740"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV06.00.00.00",
"product": {
"name": "SINUMERIK ONE PPU 1740",
"product_id": "CSAFPID-0020"
}
}
],
"category": "product_name",
"name": "SINUMERIK ONE PPU 1740"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-0590",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Improper input validation in BIOS firmware for some Intel Processors may\nallow an authenticated user to potentially enable escalation of privilege\nvia local access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0004",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.",
"product_ids": [
"CSAFPID-0004",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
]
},
{
"category": "mitigation",
"details": "Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0004",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V26.01.08 or later version",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V1.4.0 or later version",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to R1.30.0 or later version",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V25.02.08 or later version",
"product_ids": [
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0004",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
]
}
],
"title": "CVE-2020-0590"
},
{
"cve": "CVE-2020-8694",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "Insufficient access control in the Linux kernel driver for some\nIntel Processors may allow an authenticated user to potentially enable\ninformation disclosure via local access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
},
"remediations": [
{
"category": "mitigation",
"details": "As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
},
{
"category": "mitigation",
"details": "Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V22.01.08 or later version",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V26.01.08 or later version",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V21.01.15 or later version",
"product_ids": [
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V1.4.0 or later version",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to R1.30.0 or later version",
"product_ids": [
"CSAFPID-0010"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V25.02.08 or later version",
"product_ids": [
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V23.01.08 or later version",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
}
],
"title": "CVE-2020-8694"
},
{
"cve": "CVE-2020-8698",
"cwe": {
"id": "CWE-1189",
"name": "Improper Isolation of Shared Resources on System-on-a-Chip (SoC)"
},
"notes": [
{
"category": "summary",
"text": "Improper isolation of shared resources in some Intel Processors may allow an\nauthenticated user to potentially enable information disclosure via local access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
},
"remediations": [
{
"category": "mitigation",
"details": "As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
},
{
"category": "mitigation",
"details": "Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V22.01.08 or later version",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V26.01.08 or later version",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V21.01.15 or later version",
"product_ids": [
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V25.02.08 or later version",
"product_ids": [
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V23.01.08 or later version",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015"
]
}
],
"title": "CVE-2020-8698"
},
{
"cve": "CVE-2020-8745",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "summary",
"text": "Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "mitigation",
"details": "As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
{
"category": "mitigation",
"details": "Applying a Defense-in-Depth concept can help to reduce the probability that untrusted code is run on the system. Siemens recommends to apply the Defense-in-Depth concept: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V22.01.08 or later version",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V26.01.08 or later version",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V27.01.05 or later version",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V21.01.15 or later version",
"product_ids": [
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V1.4.0 or later version",
"product_ids": [
"CSAFPID-0009"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V25.02.08 or later version",
"product_ids": [
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V23.01.08 or later version",
"product_ids": [
"CSAFPID-0015"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V0209_0105 or later version",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743969/"
},
{
"category": "vendor_fix",
"details": "Update BIOS to V05.00.00.00 or later version\nSINUMERIK software can be obtained from your local Siemens account manager.",
"product_ids": [
"CSAFPID-0017"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V08.00.00.00 or later version\nSINUMERIK software can be obtained from your local Siemens account manager.",
"product_ids": [
"CSAFPID-0016",
"CSAFPID-0018"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V06.00.00.00 or later version\nSINUMERIK software can be obtained from your local Siemens account manager.",
"product_ids": [
"CSAFPID-0020"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V05.00.01.00 or later version\nThe update can be obtained from your local Siemens account manager.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "vendor_fix",
"details": "Update BIOS to V04.00.00.00 or later version\nSINUMERIK software can be obtained from your local Siemens account manager.",
"product_ids": [
"CSAFPID-0019"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2020-8745"
}
]
}
OPENSUSE-SU-2020:2075-1
Vulnerability from csaf_opensuse - Published: 2020-11-27 07:42 - Updated: 2020-11-27 07:42| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ucode-intel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ucode-intel fixes the following issues:\n\n- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)\n\n - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.\n\n- Updated Intel CPU Microcode to 20201110 official release.\n - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)\n - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)\n - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)\n\n- Release notes:\n - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).\n - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).\n - Update for functional issues. Refer to [Second Generation Intel\u00ae Xeon\u00ae Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.\n - Update for functional issues. Refer to [10th Gen Intel\u00ae Core\u2122 Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.\n - Update for functional issues. Refer to [8th and 9th Gen Intel\u00ae Core\u2122 Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.\n - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel\u00ae Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.\n - Update for functional issues. Refer to [6th Gen Intel\u00ae Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.\n\n ### New Platforms\n | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products\n |:---------------|:---------|:------------|:---------|:---------|:---------\n | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3\n | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology\n | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile\n | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile\n | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10\n | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10\n | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile\n \n ### Updated Platforms\n | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products\n |:---------------|:---------|:------------|:---------|:---------|:---------\n | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3\n | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile\n | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile\n | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable\n | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable\n | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx\n | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2\n | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2\n | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx\n | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx\n | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5\n | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120\n | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile\n | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile\n | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile\n | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile\n | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile\n | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile\n | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile\n | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile\n | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6\n | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E\n | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8\n | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9\n | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile\n | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-2075",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2075-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:2075-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAVL7PXBHMY5MEXAKSQM6PTNW6CHJJC2/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:2075-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAVL7PXBHMY5MEXAKSQM6PTNW6CHJJC2/"
},
{
"category": "self",
"summary": "SUSE Bug 1170446",
"url": "https://bugzilla.suse.com/1170446"
},
{
"category": "self",
"summary": "SUSE Bug 1173592",
"url": "https://bugzilla.suse.com/1173592"
},
{
"category": "self",
"summary": "SUSE Bug 1173594",
"url": "https://bugzilla.suse.com/1173594"
},
{
"category": "self",
"summary": "SUSE Bug 1178971",
"url": "https://bugzilla.suse.com/1178971"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8695 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8696 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8698 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8698/"
}
],
"title": "Security update for ucode-intel",
"tracking": {
"current_release_date": "2020-11-27T07:42:26Z",
"generator": {
"date": "2020-11-27T07:42:26Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:2075-1",
"initial_release_date": "2020-11-27T07:42:26Z",
"revision_history": [
{
"date": "2020-11-27T07:42:26Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20201118-lp152.2.8.1.x86_64",
"product": {
"name": "ucode-intel-20201118-lp152.2.8.1.x86_64",
"product_id": "ucode-intel-20201118-lp152.2.8.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20201118-lp152.2.8.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
},
"product_reference": "ucode-intel-20201118-lp152.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8695"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8695",
"url": "https://www.suse.com/security/cve/CVE-2020-8695"
},
{
"category": "external",
"summary": "SUSE Bug 1170415 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1170415"
},
{
"category": "external",
"summary": "SUSE Bug 1170446 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1170446"
},
{
"category": "external",
"summary": "SUSE Bug 1178591 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1178591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-27T07:42:26Z",
"details": "moderate"
}
],
"title": "CVE-2020-8695"
},
{
"cve": "CVE-2020-8696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8696"
}
],
"notes": [
{
"category": "general",
"text": "Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8696",
"url": "https://www.suse.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "SUSE Bug 1173592 for CVE-2020-8696",
"url": "https://bugzilla.suse.com/1173592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-27T07:42:26Z",
"details": "low"
}
],
"title": "CVE-2020-8696"
},
{
"cve": "CVE-2020-8698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8698"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8698",
"url": "https://www.suse.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "SUSE Bug 1173594 for CVE-2020-8698",
"url": "https://bugzilla.suse.com/1173594"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:ucode-intel-20201118-lp152.2.8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-27T07:42:26Z",
"details": "low"
}
],
"title": "CVE-2020-8698"
}
]
}
OPENSUSE-SU-2020:2098-1
Vulnerability from csaf_opensuse - Published: 2020-11-28 17:52 - Updated: 2020-11-28 17:52| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ucode-intel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ucode-intel fixes the following issues:\n\n- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)\n\n - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.\n\n- Updated Intel CPU Microcode to 20201110 official release.\n\n - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)\n - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)\n - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)\n\n- Release notes:\n - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).\n - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).\n - Update for functional issues. Refer to [Second Generation Intel\u00ae Xeon\u00ae Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.\n - Update for functional issues. Refer to [10th Gen Intel\u00ae Core\u2122 Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.\n - Update for functional issues. Refer to [8th and 9th Gen Intel\u00ae Core\u2122 Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.\n - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel\u00ae Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.\n - Update for functional issues. Refer to [6th Gen Intel\u00ae Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.\n - Update for functional issues. Refer to [Intel\u00ae Xeon\u00ae E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.\n\n ### New Platforms\n | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products\n |:---------------|:---------|:------------|:---------|:---------|:---------\n | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3\n | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology\n | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile\n | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile\n | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10\n | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10\n | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile\n \n ### Updated Platforms\n | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products\n |:---------------|:---------|:------------|:---------|:---------|:---------\n | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3\n | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile\n | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile\n | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable\n | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable\n | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx\n | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2\n | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2\n | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx\n | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx\n | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5\n | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120\n | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile\n | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile\n | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile\n | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile\n | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile\n | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile\n | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile\n | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile\n | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6\n | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E\n | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8\n | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9\n | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile\n | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-2098",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2098-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:2098-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TF4HQIBGSJ2IFTYIDCJW5IFFEG62DCU5/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:2098-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TF4HQIBGSJ2IFTYIDCJW5IFFEG62DCU5/"
},
{
"category": "self",
"summary": "SUSE Bug 1170446",
"url": "https://bugzilla.suse.com/1170446"
},
{
"category": "self",
"summary": "SUSE Bug 1173592",
"url": "https://bugzilla.suse.com/1173592"
},
{
"category": "self",
"summary": "SUSE Bug 1173594",
"url": "https://bugzilla.suse.com/1173594"
},
{
"category": "self",
"summary": "SUSE Bug 1178971",
"url": "https://bugzilla.suse.com/1178971"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8695 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8696 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8698 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8698/"
}
],
"title": "Security update for ucode-intel",
"tracking": {
"current_release_date": "2020-11-28T17:52:20Z",
"generator": {
"date": "2020-11-28T17:52:20Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:2098-1",
"initial_release_date": "2020-11-28T17:52:20Z",
"revision_history": [
{
"date": "2020-11-28T17:52:20Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20201118-lp151.2.33.1.x86_64",
"product": {
"name": "ucode-intel-20201118-lp151.2.33.1.x86_64",
"product_id": "ucode-intel-20201118-lp151.2.33.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20201118-lp151.2.33.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
},
"product_reference": "ucode-intel-20201118-lp151.2.33.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8695"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8695",
"url": "https://www.suse.com/security/cve/CVE-2020-8695"
},
{
"category": "external",
"summary": "SUSE Bug 1170415 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1170415"
},
{
"category": "external",
"summary": "SUSE Bug 1170446 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1170446"
},
{
"category": "external",
"summary": "SUSE Bug 1178591 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1178591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-28T17:52:20Z",
"details": "moderate"
}
],
"title": "CVE-2020-8695"
},
{
"cve": "CVE-2020-8696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8696"
}
],
"notes": [
{
"category": "general",
"text": "Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8696",
"url": "https://www.suse.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "SUSE Bug 1173592 for CVE-2020-8696",
"url": "https://bugzilla.suse.com/1173592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-28T17:52:20Z",
"details": "low"
}
],
"title": "CVE-2020-8696"
},
{
"cve": "CVE-2020-8698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8698"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8698",
"url": "https://www.suse.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "SUSE Bug 1173594 for CVE-2020-8698",
"url": "https://bugzilla.suse.com/1173594"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:ucode-intel-20201118-lp151.2.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-28T17:52:20Z",
"details": "low"
}
],
"title": "CVE-2020-8698"
}
]
}
OPENSUSE-SU-2024:11478-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ucode-intel-20210608-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ucode-intel-20210608-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11478",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11478-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5715 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12126 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12130 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3640 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11135 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11139 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-0543 page",
"url": "https://www.suse.com/security/cve/CVE-2020-0543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-0548 page",
"url": "https://www.suse.com/security/cve/CVE-2020-0548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24489 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24511 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24512 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24513 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8695 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8696 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8698 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8698/"
}
],
"title": "ucode-intel-20210608-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11478-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20210608-1.2.aarch64",
"product": {
"name": "ucode-intel-20210608-1.2.aarch64",
"product_id": "ucode-intel-20210608-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20210608-1.2.ppc64le",
"product": {
"name": "ucode-intel-20210608-1.2.ppc64le",
"product_id": "ucode-intel-20210608-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20210608-1.2.s390x",
"product": {
"name": "ucode-intel-20210608-1.2.s390x",
"product_id": "ucode-intel-20210608-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20210608-1.2.x86_64",
"product": {
"name": "ucode-intel-20210608-1.2.x86_64",
"product_id": "ucode-intel-20210608-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20210608-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64"
},
"product_reference": "ucode-intel-20210608-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20210608-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le"
},
"product_reference": "ucode-intel-20210608-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20210608-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x"
},
"product_reference": "ucode-intel-20210608-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20210608-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
},
"product_reference": "ucode-intel-20210608-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-5715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5715"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5715",
"url": "https://www.suse.com/security/cve/CVE-2017-5715"
},
{
"category": "external",
"summary": "SUSE Bug 1068032 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1068032"
},
{
"category": "external",
"summary": "SUSE Bug 1074562 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1074562"
},
{
"category": "external",
"summary": "SUSE Bug 1074578 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1074578"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1074741 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1074741"
},
{
"category": "external",
"summary": "SUSE Bug 1074919 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1074919"
},
{
"category": "external",
"summary": "SUSE Bug 1075006 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1075006"
},
{
"category": "external",
"summary": "SUSE Bug 1075007 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1075007"
},
{
"category": "external",
"summary": "SUSE Bug 1075262 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1075262"
},
{
"category": "external",
"summary": "SUSE Bug 1075419 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1075419"
},
{
"category": "external",
"summary": "SUSE Bug 1076115 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1076115"
},
{
"category": "external",
"summary": "SUSE Bug 1076372 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1076372"
},
{
"category": "external",
"summary": "SUSE Bug 1076606 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1076606"
},
{
"category": "external",
"summary": "SUSE Bug 1078353 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1078353"
},
{
"category": "external",
"summary": "SUSE Bug 1080039 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1080039"
},
{
"category": "external",
"summary": "SUSE Bug 1087887 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1087887"
},
{
"category": "external",
"summary": "SUSE Bug 1087939 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1087939"
},
{
"category": "external",
"summary": "SUSE Bug 1088147 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1088147"
},
{
"category": "external",
"summary": "SUSE Bug 1089055 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1089055"
},
{
"category": "external",
"summary": "SUSE Bug 1091815 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1091815"
},
{
"category": "external",
"summary": "SUSE Bug 1095735 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1095735"
},
{
"category": "external",
"summary": "SUSE Bug 1102517 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1102517"
},
{
"category": "external",
"summary": "SUSE Bug 1105108 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1105108"
},
{
"category": "external",
"summary": "SUSE Bug 1126516 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1126516"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201457 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1201457"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1203236 for CVE-2017-5715",
"url": "https://bugzilla.suse.com/1203236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5715"
},
{
"cve": "CVE-2018-12126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12126"
}
],
"notes": [
{
"category": "general",
"text": "Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12126",
"url": "https://www.suse.com/security/cve/CVE-2018-12126"
},
{
"category": "external",
"summary": "SUSE Bug 1103186 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1103186"
},
{
"category": "external",
"summary": "SUSE Bug 1111331 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1111331"
},
{
"category": "external",
"summary": "SUSE Bug 1132686 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1132686"
},
{
"category": "external",
"summary": "SUSE Bug 1135409 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1135409"
},
{
"category": "external",
"summary": "SUSE Bug 1135524 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1135524"
},
{
"category": "external",
"summary": "SUSE Bug 1137916 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1137916"
},
{
"category": "external",
"summary": "SUSE Bug 1138534 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1138534"
},
{
"category": "external",
"summary": "SUSE Bug 1141977 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1141977"
},
{
"category": "external",
"summary": "SUSE Bug 1149725 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1149725"
},
{
"category": "external",
"summary": "SUSE Bug 1149726 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1149726"
},
{
"category": "external",
"summary": "SUSE Bug 1149729 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1149729"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-12126",
"url": "https://bugzilla.suse.com/1201877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-12126"
},
{
"cve": "CVE-2018-12130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12130"
}
],
"notes": [
{
"category": "general",
"text": "Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12130",
"url": "https://www.suse.com/security/cve/CVE-2018-12130"
},
{
"category": "external",
"summary": "SUSE Bug 1103186 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1103186"
},
{
"category": "external",
"summary": "SUSE Bug 1111331 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1111331"
},
{
"category": "external",
"summary": "SUSE Bug 1132686 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1132686"
},
{
"category": "external",
"summary": "SUSE Bug 1135409 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1135409"
},
{
"category": "external",
"summary": "SUSE Bug 1137916 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1137916"
},
{
"category": "external",
"summary": "SUSE Bug 1138534 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1138534"
},
{
"category": "external",
"summary": "SUSE Bug 1141977 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1141977"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-12130",
"url": "https://bugzilla.suse.com/1201877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-12130"
},
{
"cve": "CVE-2018-3640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3640"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3640",
"url": "https://www.suse.com/security/cve/CVE-2018-3640"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087083 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1087083"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 1175912 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1175912"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3640",
"url": "https://bugzilla.suse.com/1201877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3640"
},
{
"cve": "CVE-2019-11135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11135"
}
],
"notes": [
{
"category": "general",
"text": "TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11135",
"url": "https://www.suse.com/security/cve/CVE-2019-11135"
},
{
"category": "external",
"summary": "SUSE Bug 1139073 for CVE-2019-11135",
"url": "https://bugzilla.suse.com/1139073"
},
{
"category": "external",
"summary": "SUSE Bug 1152497 for CVE-2019-11135",
"url": "https://bugzilla.suse.com/1152497"
},
{
"category": "external",
"summary": "SUSE Bug 1152505 for CVE-2019-11135",
"url": "https://bugzilla.suse.com/1152505"
},
{
"category": "external",
"summary": "SUSE Bug 1152506 for CVE-2019-11135",
"url": "https://bugzilla.suse.com/1152506"
},
{
"category": "external",
"summary": "SUSE Bug 1160120 for CVE-2019-11135",
"url": "https://bugzilla.suse.com/1160120"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2019-11135",
"url": "https://bugzilla.suse.com/1201877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11135"
},
{
"cve": "CVE-2019-11139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11139"
}
],
"notes": [
{
"category": "general",
"text": "Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11139",
"url": "https://www.suse.com/security/cve/CVE-2019-11139"
},
{
"category": "external",
"summary": "SUSE Bug 1141035 for CVE-2019-11139",
"url": "https://bugzilla.suse.com/1141035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11139"
},
{
"cve": "CVE-2020-0543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-0543"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-0543",
"url": "https://www.suse.com/security/cve/CVE-2020-0543"
},
{
"category": "external",
"summary": "SUSE Bug 1154824 for CVE-2020-0543",
"url": "https://bugzilla.suse.com/1154824"
},
{
"category": "external",
"summary": "SUSE Bug 1172205 for CVE-2020-0543",
"url": "https://bugzilla.suse.com/1172205"
},
{
"category": "external",
"summary": "SUSE Bug 1172206 for CVE-2020-0543",
"url": "https://bugzilla.suse.com/1172206"
},
{
"category": "external",
"summary": "SUSE Bug 1172207 for CVE-2020-0543",
"url": "https://bugzilla.suse.com/1172207"
},
{
"category": "external",
"summary": "SUSE Bug 1172770 for CVE-2020-0543",
"url": "https://bugzilla.suse.com/1172770"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2020-0543",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2020-0543",
"url": "https://bugzilla.suse.com/1201877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-0543"
},
{
"cve": "CVE-2020-0548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-0548"
}
],
"notes": [
{
"category": "general",
"text": "Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-0548",
"url": "https://www.suse.com/security/cve/CVE-2020-0548"
},
{
"category": "external",
"summary": "SUSE Bug 1156353 for CVE-2020-0548",
"url": "https://bugzilla.suse.com/1156353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-0548"
},
{
"cve": "CVE-2020-24489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24489"
}
],
"notes": [
{
"category": "general",
"text": "Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24489",
"url": "https://www.suse.com/security/cve/CVE-2020-24489"
},
{
"category": "external",
"summary": "SUSE Bug 1179839 for CVE-2020-24489",
"url": "https://bugzilla.suse.com/1179839"
},
{
"category": "external",
"summary": "SUSE Bug 1192359 for CVE-2020-24489",
"url": "https://bugzilla.suse.com/1192359"
},
{
"category": "external",
"summary": "SUSE Bug 1199300 for CVE-2020-24489",
"url": "https://bugzilla.suse.com/1199300"
},
{
"category": "external",
"summary": "SUSE Bug 1201731 for CVE-2020-24489",
"url": "https://bugzilla.suse.com/1201731"
},
{
"category": "external",
"summary": "SUSE Bug 1225680 for CVE-2020-24489",
"url": "https://bugzilla.suse.com/1225680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-24489"
},
{
"cve": "CVE-2020-24511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24511"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24511",
"url": "https://www.suse.com/security/cve/CVE-2020-24511"
},
{
"category": "external",
"summary": "SUSE Bug 1179836 for CVE-2020-24511",
"url": "https://bugzilla.suse.com/1179836"
},
{
"category": "external",
"summary": "SUSE Bug 1192360 for CVE-2020-24511",
"url": "https://bugzilla.suse.com/1192360"
},
{
"category": "external",
"summary": "SUSE Bug 1199300 for CVE-2020-24511",
"url": "https://bugzilla.suse.com/1199300"
},
{
"category": "external",
"summary": "SUSE Bug 1201731 for CVE-2020-24511",
"url": "https://bugzilla.suse.com/1201731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24511"
},
{
"cve": "CVE-2020-24512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24512"
}
],
"notes": [
{
"category": "general",
"text": "Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24512",
"url": "https://www.suse.com/security/cve/CVE-2020-24512"
},
{
"category": "external",
"summary": "SUSE Bug 1179837 for CVE-2020-24512",
"url": "https://bugzilla.suse.com/1179837"
},
{
"category": "external",
"summary": "SUSE Bug 1192360 for CVE-2020-24512",
"url": "https://bugzilla.suse.com/1192360"
},
{
"category": "external",
"summary": "SUSE Bug 1199300 for CVE-2020-24512",
"url": "https://bugzilla.suse.com/1199300"
},
{
"category": "external",
"summary": "SUSE Bug 1201731 for CVE-2020-24512",
"url": "https://bugzilla.suse.com/1201731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-24512"
},
{
"cve": "CVE-2020-24513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24513"
}
],
"notes": [
{
"category": "general",
"text": "Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24513",
"url": "https://www.suse.com/security/cve/CVE-2020-24513"
},
{
"category": "external",
"summary": "SUSE Bug 1179833 for CVE-2020-24513",
"url": "https://bugzilla.suse.com/1179833"
},
{
"category": "external",
"summary": "SUSE Bug 1192360 for CVE-2020-24513",
"url": "https://bugzilla.suse.com/1192360"
},
{
"category": "external",
"summary": "SUSE Bug 1199300 for CVE-2020-24513",
"url": "https://bugzilla.suse.com/1199300"
},
{
"category": "external",
"summary": "SUSE Bug 1201731 for CVE-2020-24513",
"url": "https://bugzilla.suse.com/1201731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-24513"
},
{
"cve": "CVE-2020-8695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8695"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8695",
"url": "https://www.suse.com/security/cve/CVE-2020-8695"
},
{
"category": "external",
"summary": "SUSE Bug 1170415 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1170415"
},
{
"category": "external",
"summary": "SUSE Bug 1170446 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1170446"
},
{
"category": "external",
"summary": "SUSE Bug 1178591 for CVE-2020-8695",
"url": "https://bugzilla.suse.com/1178591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8695"
},
{
"cve": "CVE-2020-8696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8696"
}
],
"notes": [
{
"category": "general",
"text": "Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8696",
"url": "https://www.suse.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "SUSE Bug 1173592 for CVE-2020-8696",
"url": "https://bugzilla.suse.com/1173592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-8696"
},
{
"cve": "CVE-2020-8698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8698"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8698",
"url": "https://www.suse.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "SUSE Bug 1173594 for CVE-2020-8698",
"url": "https://bugzilla.suse.com/1173594"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.aarch64",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.s390x",
"openSUSE Tumbleweed:ucode-intel-20210608-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-8698"
}
]
}
RHSA-2020:5083
Vulnerability from csaf_redhat - Published: 2020-11-11 10:19 - Updated: 2025-11-21 18:18A vulnerability was found in Intel's implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.
CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Security Fix(es):\n\n* hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)\n\n* hw: Vector Register Leakage-Active (CVE-2020-8696)\n\n* hw: Fast forward store predictor (CVE-2020-8698)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.\n\nBug Fix(es) and Enhancement(s):\n\n* Update Intel CPU microcode to microcode-20201027 release, addresses:\n - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;\n - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;\n - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;\n - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;\n - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;\n - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision\n 0xe0;\n - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in\n intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;\n - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in\n intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up\n to 0x2006a08;\n - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in\n intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;\n - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up\n to 0xe0;\n - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)\n microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from\n revision 0xd6 up to 0xde;\n - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up\n to 0xde;\n - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode\n from revision 0x43 up to 0x44;\n - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157\n up to 0x1000159;\n - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01\n up to 0x4003003;\n - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision\n 0x5002f01 up to 0x5003003;\n - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up\n to 0x40;\n - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up\n to 0x1e;\n - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up\n to 0x18;\n - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78\n up to 0xa0;\n - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca\n up to 0xe0.\n\n* Add README file to the documentation directory.\n\n* Add publicly-sourced codenames list to supply to gen_provides.sh; update the latter to handle the somewhat different format.\n\n* Add SUMMARY.intel-ucode file containing metadata information from the microcode file headers.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:5083",
"url": "https://access.redhat.com/errata/RHSA-2020:5083"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5083.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:18:32+00:00",
"generator": {
"date": "2025-11-21T18:18:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2020:5083",
"initial_release_date": "2020-11-11T10:19:00+00:00",
"revision_history": [
{
"date": "2020-11-11T10:19:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-11T10:19:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:18:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"product": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"product_id": "microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.2.el7_9?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"product_id": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-73.2.el7_9?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-73.2.el7_9.src",
"product": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.src",
"product_id": "microcode_ctl-2:2.1-73.2.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-73.2.el7_9?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src"
},
"product_reference": "microcode_ctl-2:2.1-73.2.el7_9.src",
"relates_to_product_reference": "7Client-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"relates_to_product_reference": "7Client-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"relates_to_product_reference": "7Client-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src"
},
"product_reference": "microcode_ctl-2:2.1-73.2.el7_9.src",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"relates_to_product_reference": "7Server-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src"
},
"product_reference": "microcode_ctl-2:2.1-73.2.el7_9.src",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-73.2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-7.9.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8695",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-04-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1828583"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Intel\u0027s implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Information disclosure issue in Intel SGX via RAPL interface",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8695"
},
{
"category": "external",
"summary": "RHBZ#1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8695",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695"
},
{
"category": "external",
"summary": "https://en.wikipedia.org/wiki/Power_analysis",
"url": "https://en.wikipedia.org/wiki/Power_analysis"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html"
}
],
"release_date": "2020-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T10:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5083"
},
{
"category": "workaround",
"details": "Until a firmware update and reboot can be applied, the attack vector can be reduced by limiting read access to the sysfs attributes that export this functionality to userspace. \n\nThe command:\n~~~\nsudo chmod 400 /sys/class/powercap/intel_rapl/*/energy_uj\n~~~\nWill do this for the current boot, it will need to be scripted to run at each boot to remain persistent across reboots.",
"product_ids": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Information disclosure issue in Intel SGX via RAPL interface"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8696",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Vector Register Leakage-Active",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "RHBZ#1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8696"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T10:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5083"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Vector Register Leakage-Active"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8698",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Fast forward store predictor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "RHBZ#1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8698",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T10:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5083"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Client-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Client-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Server-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Server-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.src",
"7Workstation-7.9.Z:microcode_ctl-2:2.1-73.2.el7_9.x86_64",
"7Workstation-7.9.Z:microcode_ctl-debuginfo-2:2.1-73.2.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Fast forward store predictor"
}
]
}
RHSA-2020:5084
Vulnerability from csaf_redhat - Published: 2020-11-11 10:08 - Updated: 2025-11-21 18:18A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.
CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Security Fix(es):\n\n* hw: Vector Register Leakage-Active (CVE-2020-8696)\n\n* hw: Fast forward store predictor (CVE-2020-8698)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.\n\nBug Fix(es) and Enhancement(s):\n\n* Update Intel CPU microcode to microcode-20201027 release, addresses:\n - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;\n - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;\n - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;\n - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;\n - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;\n - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision\n 0xe0;\n - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in\n intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;\n - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in\n intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up\n to 0x2006a08;\n - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in\n intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;\n - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up\n to 0xe0;\n - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)\n microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from\n revision 0xd6 up to 0xde;\n - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up\n to 0xde;\n - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode\n from revision 0x43 up to 0x44;\n - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157\n up to 0x1000159;\n - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01\n up to 0x4003003;\n - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision\n 0x5002f01 up to 0x5003003;\n - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up\n to 0x40;\n - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up\n to 0x1e;\n - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up\n to 0x18;\n - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78\n up to 0xa0;\n - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca\n up to 0xe0.\n\n* Add README file to the documentation directory.\n\n* Add publicly-sourced codenames list to supply to gen_provides.sh; update\n the latter to handle the somewhat different format.\n\n* Add SUMMARY.intel-ucode file containing metadata information from\n the microcode file headers.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:5084",
"url": "https://access.redhat.com/errata/RHSA-2020:5084"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5084.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:18:32+00:00",
"generator": {
"date": "2025-11-21T18:18:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2020:5084",
"initial_release_date": "2020-11-11T10:08:00+00:00",
"revision_history": [
{
"date": "2020-11-11T10:08:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-11T10:08:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:18:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:1.17-33.31.el6_10.i686",
"product": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.i686",
"product_id": "microcode_ctl-2:1.17-33.31.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@1.17-33.31.el6_10?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"product": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"product_id": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@1.17-33.31.el6_10?arch=i686\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"product": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"product_id": "microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@1.17-33.31.el6_10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"product_id": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@1.17-33.31.el6_10?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:1.17-33.31.el6_10.src",
"product": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.src",
"product_id": "microcode_ctl-2:1.17-33.31.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@1.17-33.31.el6_10?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.src",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.src",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8696",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Vector Register Leakage-Active",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "RHBZ#1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8696"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T10:08:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5084"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Vector Register Leakage-Active"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8698",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Fast forward store predictor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "RHBZ#1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8698",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T10:08:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5084"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Client-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Client-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6ComputeNode-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6ComputeNode-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Server-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Server-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.src",
"6Workstation-6.10.z:microcode_ctl-2:1.17-33.31.el6_10.x86_64",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.i686",
"6Workstation-6.10.z:microcode_ctl-debuginfo-2:1.17-33.31.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Fast forward store predictor"
}
]
}
RHSA-2020:5085
Vulnerability from csaf_redhat - Published: 2020-11-11 09:48 - Updated: 2025-11-21 18:18A vulnerability was found in Intel's implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.
A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.
CWE-212 - Improper Removal of Sensitive Information Before Storage or TransferA flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Security Fix(es):\n\n* hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)\n\n* hw: Vector Register Leakage-Active (CVE-2020-8696)\n\n* hw: Fast forward store predictor (CVE-2020-8698)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es) and Enhancement(s):\n\n* Update Intel CPU microcode to microcode-20201027 release, addresses:\n - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;\n - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;\n - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;\n - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;\n - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;\n - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision\n 0xe0;\n - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in\n intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;\n - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in\n intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up\n to 0x2006a08;\n - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in\n intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;\n - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up\n to 0xe0;\n - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)\n microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from\n revision 0xd6 up to 0xde;\n - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up\n to 0xde;\n - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode\n from revision 0x43 up to 0x44;\n - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157\n up to 0x1000159;\n - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01\n up to 0x4003003;\n - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision\n 0x5002f01 up to 0x5003003;\n - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up\n to 0x40;\n - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up\n to 0x1e;\n - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up\n to 0x18;\n - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78\n up to 0xa0;\n - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca\n up to 0xe0.\n\n* Add README file to the documentation directory.\n\n* Add publicly-sourced codenames list to supply to gen_provides.sh; update\n the latter to handle the somewhat different format.\n\n* Add SUMMARY.intel-ucode file containing metadata information from\n the microcode file headers.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:5085",
"url": "https://access.redhat.com/errata/RHSA-2020:5085"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5085.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:18:33+00:00",
"generator": {
"date": "2025-11-21T18:18:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2020:5085",
"initial_release_date": "2020-11-11T09:48:17+00:00",
"revision_history": [
{
"date": "2020-11-11T09:48:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-11T09:48:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:18:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64",
"product": {
"name": "microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64",
"product_id": "microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20200609-2.20201027.1.el8_3?arch=x86_64\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"product": {
"name": "microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"product_id": "microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20200609-2.20201027.1.el8_3?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20200609-2.20201027.1.el8_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src"
},
"product_reference": "microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
},
"product_reference": "microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64",
"relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8695",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-04-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1828583"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Intel\u0027s implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Information disclosure issue in Intel SGX via RAPL interface",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8695"
},
{
"category": "external",
"summary": "RHBZ#1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8695",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695"
},
{
"category": "external",
"summary": "https://en.wikipedia.org/wiki/Power_analysis",
"url": "https://en.wikipedia.org/wiki/Power_analysis"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html"
}
],
"release_date": "2020-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T09:48:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5085"
},
{
"category": "workaround",
"details": "Until a firmware update and reboot can be applied, the attack vector can be reduced by limiting read access to the sysfs attributes that export this functionality to userspace. \n\nThe command:\n~~~\nsudo chmod 400 /sys/class/powercap/intel_rapl/*/energy_uj\n~~~\nWill do this for the current boot, it will need to be scripted to run at each boot to remain persistent across reboots.",
"product_ids": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Information disclosure issue in Intel SGX via RAPL interface"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8696",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Vector Register Leakage-Active",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "RHBZ#1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8696"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T09:48:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5085"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Vector Register Leakage-Active"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8698",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Fast forward store predictor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "RHBZ#1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8698",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-11T09:48:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5085"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.src",
"BaseOS-8.3.0.Z.MAIN:microcode_ctl-4:20200609-2.20201027.1.el8_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Fast forward store predictor"
}
]
}
RHSA-2020:5181
Vulnerability from csaf_redhat - Published: 2020-11-23 18:01 - Updated: 2025-11-21 18:18A vulnerability was found in Intel's implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.
CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel.\n\nSecurity Fix(es):\n\n* hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)\n\n* hw: Vector Register Leakage-Active (CVE-2020-8696)\n\n* hw: Fast forward store predictor (CVE-2020-8698)\n\nBug Fix(es) and Enhancement(s):\n* Update Intel CPU microcode to microcode-20201112 release, addresses:\n - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;\n - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;\n - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;\n - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;\n - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;\n - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;\n - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision\n 0xe0;\n - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in\n intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;\n - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in\n intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up\n to 0x2006a08;\n - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in\n intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;\n - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up\n to 0xe0;\n - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)\n microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from\n revision 0xd6 up to 0xde;\n - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up\n to 0xde;\n - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode\n from revision 0x43 up to 0x44;\n - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157\n up to 0x1000159;\n - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01\n up to 0x4003003;\n - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision\n 0x5002f01 up to 0x5003003;\n - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up\n to 0x40;\n - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up\n to 0x1e;\n - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up\n to 0x34;\n - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up\n to 0x18;\n - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78\n up to 0xa0;\n - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca\n up to 0xe0.\n* Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.\n* Add README file to the documentation directory.\n* Add publicly-sourced codenames list to supply to gen_provides.sh; update\n the latter to handle the somewhat different format.\n* Add SUMMARY.intel-ucode file",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:5181",
"url": "https://access.redhat.com/errata/RHSA-2020:5181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5181.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:18:42+00:00",
"generator": {
"date": "2025-11-21T18:18:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2020:5181",
"initial_release_date": "2020-11-23T18:01:27+00:00",
"revision_history": [
{
"date": "2020-11-23T18:01:27+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-23T18:01:27+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:18:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)",
"product_id": "7ComputeNode-7.6.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:7.6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product": {
"name": "Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-7.6.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:7.6::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"product": {
"name": "microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"product_id": "microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-47.18.el7_6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"product_id": "microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-47.18.el7_6?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-47.18.el7_6.src",
"product": {
"name": "microcode_ctl-2:2.1-47.18.el7_6.src",
"product_id": "microcode_ctl-2:2.1-47.18.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-47.18.el7_6?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-47.18.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)",
"product_id": "7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src"
},
"product_reference": "microcode_ctl-2:2.1-47.18.el7_6.src",
"relates_to_product_reference": "7ComputeNode-7.6.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-47.18.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)",
"product_id": "7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"relates_to_product_reference": "7ComputeNode-7.6.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)",
"product_id": "7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"relates_to_product_reference": "7ComputeNode-7.6.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-47.18.el7_6.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src"
},
"product_reference": "microcode_ctl-2:2.1-47.18.el7_6.src",
"relates_to_product_reference": "7Server-7.6.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-47.18.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8695",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-04-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1828583"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Intel\u0027s implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Information disclosure issue in Intel SGX via RAPL interface",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8695"
},
{
"category": "external",
"summary": "RHBZ#1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8695",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695"
},
{
"category": "external",
"summary": "https://en.wikipedia.org/wiki/Power_analysis",
"url": "https://en.wikipedia.org/wiki/Power_analysis"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html"
}
],
"release_date": "2020-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-23T18:01:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5181"
},
{
"category": "workaround",
"details": "Until a firmware update and reboot can be applied, the attack vector can be reduced by limiting read access to the sysfs attributes that export this functionality to userspace. \n\nThe command:\n~~~\nsudo chmod 400 /sys/class/powercap/intel_rapl/*/energy_uj\n~~~\nWill do this for the current boot, it will need to be scripted to run at each boot to remain persistent across reboots.",
"product_ids": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Information disclosure issue in Intel SGX via RAPL interface"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8696",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Vector Register Leakage-Active",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "RHBZ#1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8696"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-23T18:01:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5181"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Vector Register Leakage-Active"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8698",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Fast forward store predictor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "RHBZ#1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8698",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-23T18:01:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5181"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7ComputeNode-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7ComputeNode-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.src",
"7Server-7.6.EUS:microcode_ctl-2:2.1-47.18.el7_6.x86_64",
"7Server-7.6.EUS:microcode_ctl-debuginfo-2:2.1-47.18.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Fast forward store predictor"
}
]
}
RHSA-2020:5182
Vulnerability from csaf_redhat - Published: 2020-11-23 17:48 - Updated: 2025-11-21 18:18A vulnerability was found in Intel's implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.
CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.4 Advances Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel.\n\nSecurity Fix(es):\n\n* hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)\n\n* hw: Vector Register Leakage-Active (CVE-2020-8696)\n\n* hw: Fast forward store predictor (CVE-2020-8698)\n\nBug Fix(es) and Enhancement(s):\n* Update Intel CPU microcode to microcode-20201112 release, addresses:\n - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;\n - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;\n - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;\n - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;\n - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;\n - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;\n - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision\n 0xe0;\n - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in\n intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;\n - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in\n intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up\n to 0x2006a08;\n - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in\n intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;\n - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up\n to 0xe0;\n - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)\n microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from\n revision 0xd6 up to 0xde;\n - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up\n to 0xde;\n - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in\n intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up\n to 0xde;\n - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode\n from revision 0x43 up to 0x44;\n - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157\n up to 0x1000159;\n - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01\n up to 0x4003003;\n - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision\n 0x5002f01 up to 0x5003003;\n - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up\n to 0x40;\n - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up\n to 0x1e;\n - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up\n to 0x34;\n - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up\n to 0x18;\n - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78\n up to 0xa0;\n - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca\n up to 0xe0.\n* Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.\n* Add README file to the documentation directory.\n* Add publicly-sourced codenames list to supply to gen_provides.sh; update\n the latter to handle the somewhat different format.\n* Add SUMMARY.intel-ucode file",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:5182",
"url": "https://access.redhat.com/errata/RHSA-2020:5182"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5182.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:18:42+00:00",
"generator": {
"date": "2025-11-21T18:18:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2020:5182",
"initial_release_date": "2020-11-23T17:48:53+00:00",
"revision_history": [
{
"date": "2020-11-23T17:48:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-11-23T17:48:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:18:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server AUS (v. 7.4)",
"product": {
"name": "Red Hat Enterprise Linux Server AUS (v. 7.4)",
"product_id": "7Server-7.4.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:7.4::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server E4S (v. 7.4)",
"product": {
"name": "Red Hat Enterprise Linux Server E4S (v. 7.4)",
"product_id": "7Server-7.4.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:7.4::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server TUS (v. 7.4)",
"product": {
"name": "Red Hat Enterprise Linux Server TUS (v. 7.4)",
"product_id": "7Server-7.4.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:7.4::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"product": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"product_id": "microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-22.36.el7_4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"product": {
"name": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"product_id": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl-debuginfo@2.1-22.36.el7_4?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-2:2.1-22.36.el7_4.src",
"product": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.src",
"product_id": "microcode_ctl-2:2.1-22.36.el7_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@2.1-22.36.el7_4?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)",
"product_id": "7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src"
},
"product_reference": "microcode_ctl-2:2.1-22.36.el7_4.src",
"relates_to_product_reference": "7Server-7.4.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)",
"product_id": "7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"relates_to_product_reference": "7Server-7.4.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)",
"product_id": "7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"relates_to_product_reference": "7Server-7.4.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)",
"product_id": "7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src"
},
"product_reference": "microcode_ctl-2:2.1-22.36.el7_4.src",
"relates_to_product_reference": "7Server-7.4.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)",
"product_id": "7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"relates_to_product_reference": "7Server-7.4.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)",
"product_id": "7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"relates_to_product_reference": "7Server-7.4.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)",
"product_id": "7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src"
},
"product_reference": "microcode_ctl-2:2.1-22.36.el7_4.src",
"relates_to_product_reference": "7Server-7.4.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-2:2.1-22.36.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)",
"product_id": "7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64"
},
"product_reference": "microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"relates_to_product_reference": "7Server-7.4.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)",
"product_id": "7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
},
"product_reference": "microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"relates_to_product_reference": "7Server-7.4.TUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8695",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-04-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1828583"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Intel\u0027s implementation of RAPL (Running Average Power Limit). An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Information disclosure issue in Intel SGX via RAPL interface",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8695"
},
{
"category": "external",
"summary": "RHBZ#1828583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1828583"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8695",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8695"
},
{
"category": "external",
"summary": "https://en.wikipedia.org/wiki/Power_analysis",
"url": "https://en.wikipedia.org/wiki/Power_analysis"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html"
}
],
"release_date": "2020-11-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-23T17:48:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5182"
},
{
"category": "workaround",
"details": "Until a firmware update and reboot can be applied, the attack vector can be reduced by limiting read access to the sysfs attributes that export this functionality to userspace. \n\nThe command:\n~~~\nsudo chmod 400 /sys/class/powercap/intel_rapl/*/energy_uj\n~~~\nWill do this for the current boot, it will need to be scripted to run at each boot to remain persistent across reboots.",
"product_ids": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Information disclosure issue in Intel SGX via RAPL interface"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8696",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890355"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Vector Register Leakage-Active",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8696"
},
{
"category": "external",
"summary": "RHBZ#1890355",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890355"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8696"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8696"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-23T17:48:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5182"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Vector Register Leakage-Active"
},
{
"acknowledgments": [
{
"names": [
"Intel"
]
}
],
"cve": "CVE-2020-8698",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2020-10-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1890356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hw: Fast forward store predictor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8698"
},
{
"category": "external",
"summary": "RHBZ#1890356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890356"
},
{
"category": "external",
"summary": "RHSB-5569051",
"url": "https://access.redhat.com/articles/5569051"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8698",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8698"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html"
}
],
"release_date": "2020-11-10T13:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-11-23T17:48:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:5182"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.AUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.AUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.E4S:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.E4S:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.src",
"7Server-7.4.TUS:microcode_ctl-2:2.1-22.36.el7_4.x86_64",
"7Server-7.4.TUS:microcode_ctl-debuginfo-2:2.1-22.36.el7_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hw: Fast forward store predictor"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.