Vulnerability-Lookup

WID-SEC-W-2024-1463

Vulnerability from csaf_certbund - Published: 2021-06-08 22:00 - Updated: 2024-06-26 22:00

Summary

Intel Prozessoren: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Der Prozessor ist das zentrale Rechenwerk eines Computers.

Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.

Betroffene Betriebssysteme: - BIOS/Firmware - Hardware Appliance

CVE-2020-12357

In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zurückzuführen . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2020-12358

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2020-12359

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2020-12360

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2020-24486

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2020-8670

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2020-8700

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0095

Affected products

Known affected 28 products

Product	Identifier	Version
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Avaya Breeze Platform Avaya	`cpe:/a:avaya:breeze_platform:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Avaya Aura Session Manager Avaya	`cpe:/a:avaya:session_manager:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Avaya Aura Communication Manager Avaya	`cpe:/a:avaya:communication_manager:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Avaya Session Border Controller Avaya	`cpe:/h:avaya:session_border_controller:-`	—
Citrix Systems Hypervisor Citrix Systems	`cpe:/o:citrix:hypervisor:-`	—
Avaya CMS Avaya	`cpe:/a:avaya:call_management_system_server:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Siemens SIMATIC S7 Siemens	`cpe:/h:siemens:simatic_s7:-`	—
Avaya Aura Experience Portal Avaya	`cpe:/a:avaya:aura_experience_portal:-`	—
Avaya Aura System Manager Avaya	`cpe:/a:avaya:aura_system_manager:-`	—
Avaya Aura Device Services Avaya	`cpe:/a:avaya:aura_device_services:-`	—
Avaya Aura Application Enablement Services Avaya	`cpe:/a:avaya:aura_application_enablement_services:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Avaya Web License Manager Avaya	`cpe:/a:avaya:web_license_manager:-`	—
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Avaya one-X Avaya	`cpe:/a:avaya:one-x:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2020-24489

In Intel Prozessoren existiert eine Schwachstelle, welche aufgrund eines unvollständigen Cleanups besteht. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern.

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-24489

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8702

Im Intel Prozessor Diagnostics Tool existiert eine Schwachstelle aufgrund eines unkontrollierten Suchpfad-Elements. Ein lokaler Angreifer kann dies ausnutzen, um seine Privilegien zu erweitern. Zur erfolgreichen Ausnutzung dieser Schwachstelle ist eine Benutzerinteraktion erforderlich.

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-24513

In Intel Prozessoren existiert eine Schwachstelle aufgrund eines möglichen Domain-Bypasses. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen.

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-0086

In Intel Prozessoren existieren mehrere Schwachstellen aufgrund von beobachtbaren Diskrepanzen bei Fließkomma-Berechnungen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen.

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-0089

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-24511

In Intel Prozessoren existieren mehrere Schwachstellen aufgrund von beobachtbaren Diskrepanzen bei Timing-Operationen sowie einer unzureichenden Isolation von geteilten Ressourcen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen.

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-24512

Affected products

Known affected 11 products

Product	Identifier	Version
EMC Avamar EMC	`cpe:/a:emc:avamar:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Intel Prozessor Intel	`cpe:/h:intel:intel_prozessor:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

References

80 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
http://linux.oracle.com/errata/ELSA-2021-2305.html	external
https://downloads.avaya.com/css/P8/documents/101076192	external
https://security.netapp.com/advisory/ntap-2021061…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://www.intel.com/content/www/us/en/security-…	external
https://www.intel.com/content/www/us/en/security-…	external
https://www.intel.com/content/www/us/en/security-…	external
https://www.intel.com/content/www/us/en/security-…	external
https://www.intel.com/content/www/us/en/security-…	external
https://www.intel.com/content/www/us/en/security-…	external
https://access.redhat.com/errata/RHSA-2021:2299	external
https://access.redhat.com/errata/RHSA-2021:2307	external
https://access.redhat.com/errata/RHSA-2021:2308	external
https://access.redhat.com/errata/RHSA-2021:2304	external
https://access.redhat.com/errata/RHSA-2021:2303	external
https://www.dell.com/support/kbdoc/de-de/00018790…	external
https://access.redhat.com/errata/RHSA-2021:2302	external
https://access.redhat.com/errata/RHSA-2021:2301	external
https://access.redhat.com/errata/RHSA-2021:2300	external
https://xenbits.xen.org/xsa/advisory-375.html	external
https://www.dell.com/support/kbdoc/de-de/00018804…	external
https://ubuntu.com/security/notices/USN-4985-1	external
https://access.redhat.com/errata/RHSA-2021:2306	external
https://access.redhat.com/errata/RHSA-2021:2305	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://support.citrix.com/article/CTX316324	external
https://security.archlinux.org/ASA-202106-34	external
https://lists.debian.org/debian-security-announce…	external
https://access.redhat.com/errata/RHSA-2021:2522	external
https://access.redhat.com/errata/RHSA-2021:2519	external
https://www.debian.org/security/2021/dsa-4934	external
https://oss.oracle.com/pipermail/oraclevm-errata/…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://linux.oracle.com/errata/ELSA-2021-2308.html	external
https://security.netapp.com/advisory/ntap-2021070…	external
https://security.gentoo.org/glsa/202107-30	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://lists.debian.org/debian-lts-announce/2021…	external
https://access.redhat.com/errata/RHSA-2021:3028	external
https://access.redhat.com/errata/RHSA-2021:3027	external
https://lists.centos.org/pipermail/centos-announc…	external
http://linux.oracle.com/errata/ELSA-2021-3028.html	external
http://linux.oracle.com/errata/ELSA-2021-3027.html	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://access.redhat.com/errata/RHSA-2021:3029	external
https://access.redhat.com/errata/RHSA-2021:3176	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://downloads.avaya.com/css/P8/documents/101077166	external
https://access.redhat.com/errata/RHSA-2021:3255	external
https://downloads.avaya.com/css/P8/documents/101077243	external
https://downloads.avaya.com/css/P8/documents/101077239	external
https://access.redhat.com/errata/RHSA-2021:3323	external
https://access.redhat.com/errata/RHSA-2021:3322	external
https://access.redhat.com/errata/RHSA-2021:3317	external
https://access.redhat.com/errata/RHSA-2021:3364	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://support.f5.com/csp/article/K41043270?utm_…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://www.dell.com/support/kbdoc/de-de/00022642…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um seine Privilegien zu erh\u00f6hen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware\n- Hardware Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1463 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2024-1463.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1463 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1463"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-2305 vom 2021-06-11",
        "url": "http://linux.oracle.com/errata/ELSA-2021-2305.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2021-079 vom 2021-06-10",
        "url": "https://downloads.avaya.com/css/P8/documents/101076192"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20210611-0005 vom 2021-06-11",
        "url": "https://security.netapp.com/advisory/ntap-20210611-0005/"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04152en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04155en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04150en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Advisory",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04156en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04159en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04164en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04165en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04163en_us"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04158en_us"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory: INTEL-SA-00442 vom 2021-06-08",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory: INTEL-SA-00458 vom 2021-06-08",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00458.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory: INTEL-SA-00463 vom 2021-06-08",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory: INTEL-SA-00464 vom 2021-06-08",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory: INTEL-SA-00465 vom 2021-06-08",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory: INTEL-SA-00516 vom 2021-06-08",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2299 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2299"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2307 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2307"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2308 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2308"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2304 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2304"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2303 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2303"
      },
      {
        "category": "external",
        "summary": "EMC Security Advisory DSA-2021-116 vom 2021-06-09",
        "url": "https://www.dell.com/support/kbdoc/de-de/000187906/dsa-2021-116-dell-client-platform-security-update-for-intel-platform-updates-2021-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2302 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2302"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2301 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2301"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2300 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2300"
      },
      {
        "category": "external",
        "summary": "XEN Security Advisory XSA-375 vom 2021-06-08",
        "url": "https://xenbits.xen.org/xsa/advisory-375.html"
      },
      {
        "category": "external",
        "summary": "EMC Security Advisory DSA-2021-109 vom 2021-06-09",
        "url": "https://www.dell.com/support/kbdoc/de-de/000188043/dsa-2021-109-poweredge-server-security-update-for-2021-1-intel-platform-update-ipu"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-4985-1 vom 2021-06-09",
        "url": "https://ubuntu.com/security/notices/USN-4985-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2306 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2306"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2305 vom 2021-06-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:2305"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:1929-1 vom 2021-06-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/008977.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:1931-1 vom 2021-06-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/008983.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:1933-1 vom 2021-06-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/008987.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:1930-1 vom 2021-06-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/008984.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:1932-1 vom 2021-06-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html"
      },
      {
        "category": "external",
        "summary": "Citrix Security Advisory CTX316324 vom 2021-06-09",
        "url": "https://support.citrix.com/article/CTX316324"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-202106-34 vom 2021-06-15",
        "url": "https://security.archlinux.org/ASA-202106-34"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4931 vom 2021-06-15",
        "url": "https://lists.debian.org/debian-security-announce/2021/msg00114.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2522 vom 2021-06-22",
        "url": "https://access.redhat.com/errata/RHSA-2021:2522"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:2519 vom 2021-06-22",
        "url": "https://access.redhat.com/errata/RHSA-2021:2519"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4934 vom 2021-06-27",
        "url": "https://www.debian.org/security/2021/dsa-4934"
      },
      {
        "category": "external",
        "summary": "ORACLE OVMSA-2021-0020 vom 2021-06-25",
        "url": "https://oss.oracle.com/pipermail/oraclevm-errata/2021-June/001020.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:14758-1 vom 2021-06-28",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/009092.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-2308 vom 2021-07-01",
        "url": "https://linux.oracle.com/errata/ELSA-2021-2308.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20210702-0002 vom 2021-07-02",
        "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202107-30 vom 2021-07-12",
        "url": "https://security.gentoo.org/glsa/202107-30"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04170en_us"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2718 vom 2021-07-26",
        "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3028 vom 2021-08-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:3028"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3027 vom 2021-08-09",
        "url": "https://access.redhat.com/errata/RHSA-2021:3027"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2021:3028 vom 2021-08-09",
        "url": "https://lists.centos.org/pipermail/centos-announce/2021-August/048347.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3028 vom 2021-08-09",
        "url": "http://linux.oracle.com/errata/ELSA-2021-3028.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3027 vom 2021-08-09",
        "url": "http://linux.oracle.com/errata/ELSA-2021-3027.html"
      },
      {
        "category": "external",
        "summary": "Siemens Security Advisory SSA-309571 vom 2021-08-10",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3029 vom 2021-08-10",
        "url": "https://access.redhat.com/errata/RHSA-2021:3029"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3176 vom 2021-08-17",
        "url": "https://access.redhat.com/errata/RHSA-2021:3176"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04187en_us"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2021-105 vom 2021-08-19",
        "url": "https://downloads.avaya.com/css/P8/documents/101077166"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3255 vom 2021-08-25",
        "url": "https://access.redhat.com/errata/RHSA-2021:3255"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2021-084 vom 2021-08-25",
        "url": "https://downloads.avaya.com/css/P8/documents/101077243"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2021-084 vom 2021-08-25",
        "url": "https://downloads.avaya.com/css/P8/documents/101077239"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3323 vom 2021-08-31",
        "url": "https://access.redhat.com/errata/RHSA-2021:3323"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3322 vom 2021-08-31",
        "url": "https://access.redhat.com/errata/RHSA-2021:3322"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3317 vom 2021-08-31",
        "url": "https://access.redhat.com/errata/RHSA-2021:3317"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3364 vom 2021-08-31",
        "url": "https://access.redhat.com/errata/RHSA-2021:3364"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:2922-1 vom 2021-09-02",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009389.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:2923-1 vom 2021-09-02",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009381.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:2924-1 vom 2021-09-02",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009390.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:2925-1 vom 2021-09-02",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009395.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:2943-1 vom 2021-09-03",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009400.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:2955-1 vom 2021-09-03",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009406.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:2957-1 vom 2021-09-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009414.html"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K41043270 vom 2021-09-08",
        "url": "https://support.f5.com/csp/article/K41043270?utm_source=f5support\u0026utm_medium=RSS"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3322-1 vom 2021-10-08",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009548.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:14848-1 vom 2021-12-01",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009799.html"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-250 vom 2024-06-27",
        "url": "https://www.dell.com/support/kbdoc/de-de/000226426/dsa-2024-250-security-update-for-dell-avamar-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities"
      }
    ],
    "source_lang": "en-US",
    "title": "Intel Prozessoren: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-06-26T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:10:37.032+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-1463",
      "initial_release_date": "2021-06-08T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-06-08T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-06-09T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Citrix aufgenommen"
        },
        {
          "date": "2021-06-10T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-06-13T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Oracle Linux, AVAYA und NetApp aufgenommen"
        },
        {
          "date": "2021-06-14T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Arch Linux aufgenommen"
        },
        {
          "date": "2021-06-15T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-06-22T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-06-27T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Debian und ORACLE aufgenommen"
        },
        {
          "date": "2021-06-28T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-06-30T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-07-04T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2021-07-11T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2021-07-14T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2021-07-25T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-08-08T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-08-09T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Siemens, CentOS und Oracle Linux aufgenommen"
        },
        {
          "date": "2021-08-10T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-08-16T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-08-17T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2021-08-22T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2021-08-24T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-08-26T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2021-08-30T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-09-02T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-09-05T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-09-06T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-09-08T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Informationen von F5 aufgenommen"
        },
        {
          "date": "2021-10-07T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-12-01T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-06-26T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Dell aufgenommen"
        }
      ],
      "status": "final",
      "version": "30"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Avaya Aura Application Enablement Services",
            "product": {
              "name": "Avaya Aura Application Enablement Services",
              "product_id": "T015516",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Communication Manager",
            "product": {
              "name": "Avaya Aura Communication Manager",
              "product_id": "T015126",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:communication_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Device Services",
            "product": {
              "name": "Avaya Aura Device Services",
              "product_id": "T015517",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_device_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Experience Portal",
            "product": {
              "name": "Avaya Aura Experience Portal",
              "product_id": "T015519",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_experience_portal:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Session Manager",
            "product": {
              "name": "Avaya Aura Session Manager",
              "product_id": "T015127",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:session_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura System Manager",
            "product": {
              "name": "Avaya Aura System Manager",
              "product_id": "T015518",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_system_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Breeze Platform",
            "product": {
              "name": "Avaya Breeze Platform",
              "product_id": "T015823",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:breeze_platform:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya CMS",
            "product": {
              "name": "Avaya CMS",
              "product_id": "997",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:call_management_system_server:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Session Border Controller",
            "product": {
              "name": "Avaya Session Border Controller",
              "product_id": "T015520",
              "product_identification_helper": {
                "cpe": "cpe:/h:avaya:session_border_controller:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Web License Manager",
            "product": {
              "name": "Avaya Web License Manager",
              "product_id": "T016243",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:web_license_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya one-X",
            "product": {
              "name": "Avaya one-X",
              "product_id": "1024",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:one-x:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Avaya"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Citrix Systems Hypervisor",
            "product": {
              "name": "Citrix Systems Hypervisor",
              "product_id": "T016872",
              "product_identification_helper": {
                "cpe": "cpe:/o:citrix:hypervisor:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Citrix Systems XenServer",
            "product": {
              "name": "Citrix Systems XenServer",
              "product_id": "T004077",
              "product_identification_helper": {
                "cpe": "cpe:/a:citrix:xenserver:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Citrix Systems"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Computer",
            "product": {
              "name": "Dell Computer",
              "product_id": "T006498",
              "product_identification_helper": {
                "cpe": "cpe:/o:dell:dell_computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "EMC Avamar",
            "product": {
              "name": "EMC Avamar",
              "product_id": "T014381",
              "product_identification_helper": {
                "cpe": "cpe:/a:emc:avamar:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "EMC"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "F5 BIG-IP",
            "product": {
              "name": "F5 BIG-IP",
              "product_id": "T001663",
              "product_identification_helper": {
                "cpe": "cpe:/a:f5:big-ip:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HPE ProLiant",
            "product": {
              "name": "HPE ProLiant",
              "product_id": "T009310",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:proliant:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HPE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Intel Prozessor",
            "product": {
              "name": "Intel Prozessor",
              "product_id": "T011586",
              "product_identification_helper": {
                "cpe": "cpe:/h:intel:intel_prozessor:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Intel"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp FAS",
            "product": {
              "name": "NetApp FAS",
              "product_id": "T011540",
              "product_identification_helper": {
                "cpe": "cpe:/h:netapp:fas:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source Arch Linux",
            "product": {
              "name": "Open Source Arch Linux",
              "product_id": "T013312",
              "product_identification_helper": {
                "cpe": "cpe:/o:archlinux:archlinux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Siemens SIMATIC S7",
            "product": {
              "name": "Siemens SIMATIC S7",
              "product_id": "T020086",
              "product_identification_helper": {
                "cpe": "cpe:/h:siemens:simatic_s7:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-12357",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-12357"
    },
    {
      "cve": "CVE-2020-12358",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-12358"
    },
    {
      "cve": "CVE-2020-12359",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-12359"
    },
    {
      "cve": "CVE-2020-12360",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-12360"
    },
    {
      "cve": "CVE-2020-24486",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-24486"
    },
    {
      "cve": "CVE-2020-8670",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-8670"
    },
    {
      "cve": "CVE-2020-8700",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-8700"
    },
    {
      "cve": "CVE-2021-0095",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese sind auf Out-of-Bound-Lese und Schreibfehler, Fehler bei der Initialisierung, Fehler bei der Eingabevalidierung, eine Race-Condition sowie Fehler im Kontrollfluss zur\u00fcckzuf\u00fchren . Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T004077",
          "T006498",
          "67646",
          "T015823",
          "T011540",
          "T015127",
          "T011586",
          "T015126",
          "T004914",
          "T015520",
          "T016872",
          "997",
          "T001663",
          "T020086",
          "T015519",
          "T015518",
          "T015517",
          "T015516",
          "T013312",
          "T012167",
          "T016243",
          "T014381",
          "2951",
          "T002207",
          "1024",
          "T000126",
          "1727",
          "T009310"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2021-0095"
    },
    {
      "cve": "CVE-2020-24489",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existiert eine Schwachstelle, welche aufgrund eines unvollst\u00e4ndigen Cleanups besteht. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-24489"
    },
    {
      "cve": "CVE-2021-24489",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existiert eine Schwachstelle, welche aufgrund eines unvollst\u00e4ndigen Cleanups besteht. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2021-24489"
    },
    {
      "cve": "CVE-2020-8702",
      "notes": [
        {
          "category": "description",
          "text": "Im Intel Prozessor Diagnostics Tool existiert eine Schwachstelle aufgrund eines unkontrollierten Suchpfad-Elements. Ein lokaler Angreifer kann dies ausnutzen, um seine Privilegien zu erweitern. Zur erfolgreichen Ausnutzung dieser Schwachstelle ist eine Benutzerinteraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-8702"
    },
    {
      "cve": "CVE-2020-24513",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existiert eine Schwachstelle aufgrund eines m\u00f6glichen Domain-Bypasses. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-24513"
    },
    {
      "cve": "CVE-2021-0086",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen aufgrund von beobachtbaren Diskrepanzen bei Flie\u00dfkomma-Berechnungen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2021-0086"
    },
    {
      "cve": "CVE-2021-0089",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen aufgrund von beobachtbaren Diskrepanzen bei Flie\u00dfkomma-Berechnungen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2021-0089"
    },
    {
      "cve": "CVE-2020-24511",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen aufgrund von beobachtbaren Diskrepanzen bei Timing-Operationen sowie einer unzureichenden Isolation von geteilten Ressourcen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-24511"
    },
    {
      "cve": "CVE-2020-24512",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Prozessoren existieren mehrere Schwachstellen aufgrund von beobachtbaren Diskrepanzen bei Timing-Operationen sowie einer unzureichenden Isolation von geteilten Ressourcen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T014381",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "T001663",
          "T011586",
          "T012167",
          "1727",
          "T004914"
        ]
      },
      "release_date": "2021-06-08T22:00:00.000+00:00",
      "title": "CVE-2020-24512"
    }
  ]
}

CVE-2020-12357 (GCVE-0-2020-12357)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:49 – Updated: 2024-08-04 11:56

Summary

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Severity

No CVSS data available.

CWE

escalation of privilege

Assigner

intel

References

3 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021070…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:56:51.310Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:41.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-12357",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210702-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-12357",
    "datePublished": "2021-06-09T18:49:02.000Z",
    "dateReserved": "2020-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:56:51.310Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-12358 (GCVE-0-2020-12358)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:50 – Updated: 2024-08-04 11:56

Summary

Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.

Severity

No CVSS data available.

CWE

denial of service

Assigner

intel

References

3 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021070…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:56:51.411Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:24.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-12358",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210702-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-12358",
    "datePublished": "2021-06-09T18:50:41.000Z",
    "dateReserved": "2020-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:56:51.411Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-12359 (GCVE-0-2020-12359)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:50 – Updated: 2024-08-04 11:56

Summary

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Severity

No CVSS data available.

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021070…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:56:51.555Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-02T11:06:23.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-12359",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210702-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-12359",
    "datePublished": "2021-06-09T18:50:35.000Z",
    "dateReserved": "2020-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:56:51.555Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-12360 (GCVE-0-2020-12360)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:53 – Updated: 2024-08-04 11:56

Summary

Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

No CVSS data available.

CWE

escalation of privilege

Assigner

intel

References

3 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021070…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:56:51.566Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:44.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-12360",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210702-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-12360",
    "datePublished": "2021-06-09T18:53:39.000Z",
    "dateReserved": "2020-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:56:51.566Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24486 (GCVE-0-2020-24486)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:53 – Updated: 2024-08-04 15:12

Summary

Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

Severity

No CVSS data available.

CWE

denial of service

Assigner

intel

References

3 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021070…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:09.087Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:37.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24486",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210702-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24486",
    "datePublished": "2021-06-09T18:53:45.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:09.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24489 (GCVE-0-2020-24489)

Vulnerability from cvelistv5 – Published: 2021-06-09 19:59 – Updated: 2024-08-04 15:12

Summary

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

No CVSS data available.

CWE

escalation of privilege

Assigner

intel

References

3 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://www.debian.org/security/2021/dsa-4934	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) VT-d products	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:09.228Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html"
          },
          {
            "name": "DSA-4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4934"
          },
          {
            "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) VT-d products",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-26T09:06:13.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html"
        },
        {
          "name": "DSA-4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4934"
        },
        {
          "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24489",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) VT-d products",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html"
            },
            {
              "name": "DSA-4934",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4934"
            },
            {
              "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24489",
    "datePublished": "2021-06-09T19:59:51.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:09.228Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24511 (GCVE-0-2020-24511)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:53 – Updated: 2024-08-04 15:12

Summary

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Severity

No CVSS data available.

CWE

information disclosure

Assigner

intel

References

5 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021061…	x_refsource_CONFIRM
https://www.debian.org/security/2021/dsa-4934	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:09.012Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210611-0005/"
          },
          {
            "name": "DSA-4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4934"
          },
          {
            "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:39.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210611-0005/"
        },
        {
          "name": "DSA-4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4934"
        },
        {
          "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24511",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210611-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210611-0005/"
            },
            {
              "name": "DSA-4934",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4934"
            },
            {
              "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24511",
    "datePublished": "2021-06-09T18:53:53.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:09.012Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24512 (GCVE-0-2020-24512)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:53 – Updated: 2024-08-04 15:12

Summary

Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Severity

No CVSS data available.

CWE

information disclosure

Assigner

intel

References

5 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021061…	x_refsource_CONFIRM
https://www.debian.org/security/2021/dsa-4934	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:09.097Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210611-0005/"
          },
          {
            "name": "DSA-4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4934"
          },
          {
            "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:20.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210611-0005/"
        },
        {
          "name": "DSA-4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4934"
        },
        {
          "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24512",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210611-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210611-0005/"
            },
            {
              "name": "DSA-4934",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4934"
            },
            {
              "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24512",
    "datePublished": "2021-06-09T18:53:59.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:09.097Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-24513 (GCVE-0-2020-24513)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:54 – Updated: 2024-08-04 15:12

Summary

Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Severity

No CVSS data available.

CWE

information disclosure

Assigner

intel

References

4 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://www.debian.org/security/2021/dsa-4934	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel Atom(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:12:08.752Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html"
          },
          {
            "name": "DSA-4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4934"
          },
          {
            "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel Atom(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:29.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html"
        },
        {
          "name": "DSA-4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4934"
        },
        {
          "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-24513",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel Atom(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html"
            },
            {
              "name": "DSA-4934",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4934"
            },
            {
              "name": "[debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-24513",
    "datePublished": "2021-06-09T18:54:08.000Z",
    "dateReserved": "2020-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:12:08.752Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8670 (GCVE-0-2020-8670)

Vulnerability from cvelistv5 – Published: 2021-06-09 18:50 – Updated: 2024-08-04 10:03

Summary

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Severity

No CVSS data available.

CWE

escalation of privilege

Assigner

intel

References

3 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021070…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:46.319Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T11:06:22.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-8670",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210702-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210702-0002/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-8670",
    "datePublished": "2021-06-09T18:50:23.000Z",
    "dateReserved": "2020-02-06T00:00:00.000Z",
    "dateUpdated": "2024-08-04T10:03:46.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2024-1463

CVE-2020-12357 (GCVE-0-2020-12357)

CVE-2020-12358 (GCVE-0-2020-12358)

CVE-2020-12359 (GCVE-0-2020-12359)

CVE-2020-12360 (GCVE-0-2020-12360)

CVE-2020-24486 (GCVE-0-2020-24486)

CVE-2020-24489 (GCVE-0-2020-24489)

CVE-2020-24511 (GCVE-0-2020-24511)

CVE-2020-24512 (GCVE-0-2020-24512)

CVE-2020-24513 (GCVE-0-2020-24513)

CVE-2020-8670 (GCVE-0-2020-8670)

Tags

Sightings

Nomenclature