Lucene search
Huawei TechnologiesHUAWEI-SA-20190712-01-MDSHistoryJul 12, 2019 - 12:00 a.m.
Security Advisory - Intel Microarchitectural Data Sampling (MDS) vulnerabilities
2019-07-1200:00:00
Huawei Technologies
www.huawei.com
50
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
CVSS3
5.6
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
40.4%
Intel officially released a group of microarchitecture data sampling (MDS) vulnerabilities. An attacker with local access to a targeted system may exploit these vulnerabilities to obtain data on the targeted system, causing some information leakage. (Vulnerability ID: HWPSIRT-2019-05136, HWPSIRT-2019-05137, HWPSIRT-2019-05138 and HWPSIRT-2019-05139)
The four vulnerabilities have been assigned four Common Vulnerabilities and Exposures (CVE) IDs: CVE-2018-12126, CVE-2018-12127, CVE-2018-12130 and CVE-2019-11091.
Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en
Affected configurations
Node
huawei1288h_v5Range<V100R005C00SPC124
ORhuawei2288h_v5Range<V100R005C00SPC124
ORhuawei2288_v5Range<V100R005C00SPC171
ORhuawei2288c_v5Range<1.0.0.SPC105
ORhuawei2298_v5Range<5.0.RC5
ORhuawei2488_v5Range<V100R005C00SPC512
ORhuawei2488h_v5Range<V100R005C00SPC213
ORhuaweioceanstor_5800_v3Range<V100R003C00SPC709
ORhuawei5885h_v5Range<V100R005C00SPC113
ORhuaweibh620_v2_firmwareRange<V100R002C00SPC302
ORhuaweibh621_v2_firmwareRange<V100R002C00SPC301
ORhuaweibh622_v2_firmwareRange<V100R002C00SPC309
ORhuaweibh640_v2_firmwareRange<V100R002C00SPC307
ORhuaweifusionserver_ch121_v3Range<V100R001C00SPC286
ORhuaweich121l_v3_firmwareRange<V100R001C00SPC286
ORhuaweich140_v3_firmwareRange<V100R001C00SPC286
ORhuaweich140l_v3_firmwareRange<V100R001C00SPC286
ORhuaweifusionserver_ch220_v3Range<V100R001C00SPC286
ORhuaweifusionserver_ch222_v3Range<V100R001C00SPC286
ORhuaweich225_v5Range<V100R001C00SPC286
ORhuaweich226_v3_server_firmwareRange<V100R001C00SPC286
ORhuaweich121_v5_firmwareRange<V100R001C00SPC166
ORhuaweich242_v5Range<V100R001C00SPC166
ORhuaweioceanstor_5800_v3Range<V100R001C00SPC290
ORhuaweich221_v5Range<V100R001C00SPC176
ORhuaweich225_v5Range<V100R001C00SPC180
ORhuaweich242_v3_firmwareRange<V100R001C00SPC286
ORhuaweirh1288_v2_firmwareRange<V100R002C00SPC303
ORhuaweitecal_dh620_v2_firmwareRange<V100R001C00SPC202
ORhuaweitecal_dh621_v2_firmwareRange<V100R001C00SPC202
ORhuaweirh1288_v2_firmwareRange<V100R002C00SPC202
ORhuaweitecal_dh628_v2_firmwareRange<V100R001C00SPC201
ORhuaweifusionsphere_openstackMatchv100r006c00rc3b036
ORhuaweig5500_g560Range<1.0.2.SPC7
ORhuaweirh1288_v2_firmwareRange<V100R002C00SPC640
ORhuaweirh1288_v3_firmwareRange<V100R003C00SPC712
ORhuaweifusionserver_rh2288h_v3Range<V100R003C00SPC712
ORhuaweifusionserver_rh1288a_v2Range<V100R002C00SPC710
ORhuaweirh2285_v2_firmwareRange<V100R002C00SPC511
ORhuaweirh2285h_v2_firmwareRange<V100R002C00SPC511
ORhuaweirh2288_v2_firmwareRange<V100R002C00SPC610
ORhuaweifusionserver_rh2288_v3Range<V100R003C00SPC711
ORhuaweirh2288a_v2_firmwareRange<V100R002C00SPC710
ORhuaweirh2288h_v2_firmwareRange<V100R002C00SPC620
ORhuaweirh2485_v2_firmwareRange<V100R002C00SPC713
ORhuaweirh5885_v3_firmwareRange<V100R003C01SPC126
ORhuaweirh5885_v3_firmwareRange<V100R003C01SPC129
ORhuaweitecal_rh5885h_v3_firmwareRange<V100R003C00SPC219
ORhuaweitecal_rh5885h_v3_firmwareRange<V100R003C10SPC126
ORhuaweifusionserver_rh8100_v3Range<V100R003C00SPC233
ORhuaweismc2.0Matchv500r002c00
ORhuaweismc2.0Matchv600r006c00
ORhuaweismc2.0Matchv600r006c10
ORhuaweismc2.0Matchv600r019c00
ORhuaweismc2.0Matchv600r019c10
ORhuaweix6800_v5Range<V100R005C10SPC106
ORhuaweixh321_v5Range<V100R002C00SPC306
ORhuaweixh321_v3_firmwareRange<V100R003C00SPC710
ORhuaweixh620_v3_firmwareRange<V100R003C00SPC710
ORhuaweixh622_v3_server_firmwareRange<V100R003C00SPC710
ORhuaweixh628_v3_firmwareRange<V100R003C00SPC710
ORhuaweix6000Range<V100R003C00SPC710
ORhuaweixh321_v5Range<V100R005C00SPC504
ORhuaweixh321l_v5Range<V100R005C00SPC508
ORhuaweieapp610Matchv100r004c10
ORhuaweieapp610Matchv100r005c00
ORhuaweieapp610Matchv100r005c10
ORhuaweiecns280Matchv100r005c00
ORhuaweiecns280Matchv100r005c00spc002
ORhuaweiecns280Matchv100r005c00spc300
ORhuaweiecns280Matchv100r005c00spc306
ORhuaweiecns280Matchv100r005c00spc316
ORhuaweiecns280Matchv100r005c00spc326
ORhuaweiecns280Matchv100r005c10
ORhuaweiecns280Matchv100r005c10spc100
ORhuaweiemrs620Matchv100r005c00
ORhuaweiemrs620Matchv100r005c10
ORhuaweieomc910Matchv100r004c10
ORhuaweieomc910Matchv100r005c00
ORhuaweieomc910Matchv100r005c10
ORhuaweiessc690Matchv100r005c00
ORhuaweiessc690Matchv100r005c10
ORhuaweiespace_usm_firmwareMatchv300r001c00
ORhuaweiespace_usm_firmwareMatchv300r001c00spc100
ORhuaweiespace_usm_firmwareMatchv300r001c00spc200
ORhuaweiespace_usm_firmwareMatchv300r001c00spc300
ORhuaweiespace_usm_firmwareMatchv300r001c00spc302
ORhuaweiespace_usm_firmwareMatchv300r001c00spc500
ORhuaweiespace_usm_firmwareMatchv300r001c00spc600
ORhuaweiespace_usm_firmwareMatchv300r001c00spc700
ORhuaweiespace_usm_firmwareMatchv300r001c00spc701
ORhuaweiespace_usm_firmwareMatchv300r001c00spc703
ORhuaweiespace_usm_firmwareMatchv300r001c00spc800
ORhuaweiespace_usm_firmwareMatchv300r001c00spc900
ORhuaweiespace_usm_firmwareMatchv300r001c00spc901
ORhuaweiespace_usm_firmwareMatchv300r001c00spc902
ORhuaweiespace_usm_firmwareMatchv300r001c00sph201
ORhuaweiespace_usm_firmwareMatchv300r001c00sph202
ORhuaweiespace_usm_firmwareMatchv300r001c00sph301
ORhuaweiespace_usm_firmwareMatchv300r001c00sph702
ORhuaweieudc660Matchv100r004c10
ORhuaweieudc660Matchv100r005c00
ORhuaweieudc660Matchv100r005c10
ORhuaweiimanager_neteco_6000Matchv600r007c40
ORhuaweiimanager_neteco_6000Matchv600r007c60
ORhuaweiimanager_neteco_6000Matchv600r007c80
ORhuaweiimanager_neteco_6000Matchv600r007c90
ORhuaweiimanager_neteco_6000Matchv600r008c00
ORhuaweiimanager_neteco_6000Matchv600r008c10
ORhuaweiimanager_neteco_6000Matchv600r008c20
Related
openvas
openvas
openSUSE: Security Advisory for ucode-intel (openSUSE-SU-2019:1402-1)
2019-05-17 00:00:00
openSUSE: Security Advisory for ucode-intel (openSUSE-SU-2019:1805-1)
2019-07-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:14133-1)
2021-06-09 00:00:00
nessus
nessus
Citrix XenServer Microarchitectural Data Sampling Speculative Side-Channel Vulnerabilities (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (CTX2251995)
2019-05-30 00:00:00
redhat
redhat
(RHSA-2019:1196) Important: kernel security update
2019-05-14 19:37:08
(RHSA-2019:1174) Important: kernel-rt security update
2019-05-14 17:22:02
(RHSA-2019:1178) Important: qemu-kvm security update
2019-05-14 17:23:31
oraclelinux
oraclelinux
qemu-kvm security update
2019-05-15 00:00:00
kernel security and bug fix update
2019-05-14 00:00:00
libvirt security update
2019-05-14 00:00:00
suse
suse
Security update for ucode-intel (important)
2019-05-28 00:00:00
Security update for ucode-intel (important)
2019-07-24 00:00:00
Security update for libvirt (important)
2019-06-03 00:00:00
osv
osv
intel-microcode - security update
2019-06-20 00:00:00
linux - security update
2019-05-14 00:00:00
intel-microcode - security update
2019-05-15 00:00:00
ubuntu
ubuntu
libvirt update
2019-05-16 00:00:00
Linux kernel (Trusty HWE) vulnerabilities
2019-05-15 00:00:00
Intel Microcode update
2019-06-20 00:00:00
centos
centos
kernel, perf, python security update
2019-05-15 15:42:15
qemu security update
2019-05-15 20:31:32
libvirt security update
2019-05-15 15:41:00
vmware
vmware
debian
debian
[SECURITY] [DLA 1789-2] intel-microcode security update
2019-06-20 21:50:38
[SECURITY] [DSA 4447-2] intel-microcode security update
2019-06-20 06:41:32
[SECURITY] [DSA 4444-1] linux security update
2019-05-14 21:17:39
virtuozzo
virtuozzo
amazon
amazon
Important: qemu-kvm
2019-08-07 23:12:00
Important: kernel
2019-05-07 22:39:00
fedora
fedora
[SECURITY] Fedora 30 Update: qemu-3.1.0-8.fc30
2019-05-17 01:08:38
[SECURITY] Fedora 30 Update: libvirt-5.1.0-5.fc30
2019-05-17 01:08:36
intel
intel
Microarchitectural Data Sampling Advisory
2021-05-11 00:00:00
threatpost
threatpost
Intel CPUs Impacted By New Class of Spectre-Like Attacks
2019-05-14 18:01:49
Intel ZombieLoad Side-Channel Attack: 10 Takeaways
2019-05-15 16:48:11
thn
thn
New Class of CPU Flaws Affect Almost Every Intel Processor Since 2011
2019-05-14 20:20:00
lenovo
lenovo
Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities - US
2019-05-14 16:38:15
hp
hp
HPSBHF03618 rev. 8 - Intel Microarchitectural Data Sampling Security Updates
2019-05-14 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2019-05-16 11:25:22
cloudfoundry
cloudfoundry
USN-3977-2: Intel Microcode update (AKA ZombieLoad Attack) | Cloud Foundry
2019-05-29 00:00:00
USN-3977-1: Intel Microcode update (AKA ZombieLoad Attack) | Cloud Foundry
2019-05-20 00:00:00
paloalto
paloalto
Information about Recent Intel Side Channel Vulnerabilities
2019-05-29 00:00:00
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
CVSS3
5.6
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
40.4%
Related for HUAWEI-SA-20190712-01-MDS