K81556107 : Intel processors vulnerabilities CVE-2019-0123 and CVE-2019-0124

Security Advisory Description

• CVE-2019-0123
  Insufficient memory protection in Intel® 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2019-0124
  Insufficient memory protection in Intel® 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access.

Impact

There is no impact; F5 products are not affected by this vulnerability.

However, in cloud and Virtual Edition (VE) environments, preventing these attacks falls on the hypervisor/host platform, outside the scope of F5’s ability to support or patch. Please contact your cloud provider or hypervisor vendor to ensure their platforms or products are not subject to this vulnerability.