Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:2831
HistoryJul 07, 2020 - 8:14 a.m.

(RHSA-2020:2831) Important: kernel security and bug fix update

2020-07-0708:14:43
access.redhat.com
72
kernel
linux
security fix
bug fix
cve-2020-12888
bz#1840674
dos
srbds

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.001

Percentile

19.4%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • kernel: hw: provide reporting and microcode mitigation toggle for CVE-2020-0543 / Special Register Buffer Data Sampling (SRBDS) (BZ#1840674)

Affected configurations

Vulners
Node
redhatkernel-rtRange≤3.10.0-1127.13.1.rt56.1110.el7
OR
redhatkernelRange≤3.10.0-1127.13.1.el7
OR
redhatkernelRange≤4.14.0-115.26.1.el7a
OR
redhatkernelRange≤3.10.0-327.89.1.el7
OR
redhatkernelRange≤3.10.0-514.78.1.el7
OR
redhatkernelRange≤3.10.0-693.71.2.el7
OR
redhatkernelRange≤3.10.0-957.56.1.el7
OR
redhatkernelRange≤3.10.0-1062.30.1.el7
OR
redhatkernel-rtRange≤4.18.0-193.13.2.rt13.65.el8_2
OR
redhatkernelRange≤4.18.0-193.13.2.el8_2
OR
redhatkernelRange≤4.18.0-80.27.1.el8_0
OR
redhatkernelRange≤4.18.0-147.24.2.el8_1
OR
redhatkernelRange≤3.10.0-957.56.1.el7
OR
redhatmicrocode_ctlRange≤1.17-33.26.el6_10
OR
redhatmicrocode_ctl-2Range≤1.17-17.31.el6_5
OR
redhatmicrocode_ctl-2Range≤1.17-19.29.el6_6
OR
redhatmicrocode_ctlRange≤2.1-61.6.el7_8
OR
redhatmicrocode_ctlRange≤2.1-73.11.el7_9
OR
redhatmicrocode_ctl-2Range≤2.1-12.30.el7_2
OR
redhatmicrocode_ctl-2Range≤2.1-12.39.el7_2
OR
redhatmicrocode_ctl-2Range≤2.1-16.33.el7_3
OR
redhatmicrocode_ctl-2Range≤2.1-16.42.el7_3
OR
redhatmicrocode_ctl-2Range≤2.1-22.32.el7_4
OR
redhatmicrocode_ctl-2Range≤2.1-22.41.el7_4
OR
redhatmicrocode_ctl-2Range≤2.1-47.23.el7_6
OR
redhatmicrocode_ctl-2Range≤2.1-47.14.el7_6
OR
redhatmicrocode_ctl-2Range≤2.1-53.9.el7_7
OR
redhatmicrocode_ctl-2Range≤2.1-53.18.el7_7
OR
redhatmicrocode_ctlRange≤20191115-4.20200602.2.el8_2
OR
redhatmicrocode_ctlRange≤20210216-1.20210608.1.el8_4
OR
redhatmicrocode_ctl-4Range≤20180807a-2.20200609.1.el8_0
OR
redhatmicrocode_ctl-4Range≤20190618-1.20200609.1.el8_1
OR
redhatmicrocode_ctl-4Range≤20190618-1.20210608.1.el8_1
OR
redhatmicrocode_ctl-4Range≤20191115-4.20210608.1.el8_2
AND
redhatenterprise_linuxMatch7
OR
redhatenterprise_linuxMatchnfv
OR
redhatenterprise_linuxMatch8
OR
redhatenterprise_linuxMatchhypervisor
OR
redhatenterprise_linuxMatch6
VendorProductVersionCPE
redhatkernel-rt*cpe:2.3:o:redhat:kernel-rt:*:*:*:*:*:*:*:*
redhatkernel*cpe:2.3:a:redhat:kernel:*:*:*:*:*:*:*:*
redhatmicrocode_ctl*cpe:2.3:a:redhat:microcode_ctl:*:*:*:*:*:*:*:*
redhatmicrocode_ctl-2*cpe:2.3:a:redhat:microcode_ctl-2:*:*:*:*:*:*:*:*
redhatmicrocode_ctl-4*cpe:2.3:a:redhat:microcode_ctl-4:*:*:*:*:*:*:*:*
redhatenterprise_linux7cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*
redhatenterprise_linuxnfvcpe:2.3:o:redhat:enterprise_linux:nfv:*:*:*:*:*:*:*
redhatenterprise_linux8cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*
redhatenterprise_linuxhypervisorcpe:2.3:o:redhat:enterprise_linux:hypervisor:*:*:*:*:*:*:*
redhatenterprise_linux6cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Related

nessus 63
oraclelinux 10
redhat 23
openvas 31
centos 3
fedora 8
nvd 2
osv 18
redhatcve 2
prion 2
debiancve 2
cvelist 2
veracode 2
cbl_mariner 1
ubuntucve 2
cve 2
attackerkb 1
lenovo 2
ibm 1
f5 2
xen 1
ics 1
suse 2
freebsd 1
intel 1
citrix 1
virtuozzo 2
thn 1
hp 1
ubuntu 3
debian 3
cloudfoundry 2
archlinux 1
nessus
nessus
RHEL 7 : kernel (RHSA-2020:2831)
2020-07-07 00:00:00
RHEL 7 : kernel (RHSA-2020:2664)
2020-06-25 00:00:00
Oracle Linux 7 : kernel (ELSA-2020-2664)
2020-06-25 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2020-06-23 00:00:00
Unbreakable Enterprise kernel security update
2020-06-10 00:00:00
Unbreakable Enterprise kernel security update
2020-06-18 00:00:00
redhat
redhat
(RHSA-2020:2664) Important: kernel security and bug fix update
2020-06-23 11:09:02
(RHSA-2020:2665) Important: kernel-rt security and bug fix update
2020-06-23 11:09:20
(RHSA-2020:3019) Important: kernel security, bug fix, and enhancement update
2020-07-21 12:36:15
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2020:2664)
2020-06-24 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2020-57bf620276)
2020-05-29 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2020-5436586091)
2020-06-07 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2020-06-23 19:56:05
kernel, perf, python security update
2020-06-10 17:19:46
microcode_ctl security update
2020-06-10 17:17:14
fedora
fedora
[SECURITY] Fedora 32 Update: kernel-5.6.14-300.fc32
2020-05-25 02:48:16
[SECURITY] Fedora 31 Update: kernel-5.6.15-200.fc31
2020-06-02 03:14:22
[SECURITY] Fedora 31 Update: kernel-headers-5.6.18-200.fc31
2020-06-18 01:02:02
nvd
nvd
CVE-2020-12888
2020-05-15 18:15:13
CVE-2020-0543
2020-06-15 14:15:11
osv
osv
Red Hat Security Advisory: kernel-rt security and bug fix update
2024-09-13 22:05:25
Red Hat Security Advisory: kernel security and bug fix update
2024-09-13 22:05:15
Red Hat Security Advisory: kernel security and bug fix update
2024-09-13 22:05:49
redhatcve
redhatcve
CVE-2020-12888
2020-05-15 18:25:34
CVE-2020-0543
2020-06-09 17:15:48
prion
prion
Memory corruption
2020-05-15 18:15:00
Information disclosure
2020-06-15 14:15:00
debiancve
debiancve
CVE-2020-12888
2020-05-15 18:15:13
CVE-2020-0543
2020-06-15 14:15:11
cvelist
cvelist
CVE-2020-12888
2020-05-15 17:02:20
CVE-2020-0543
2020-06-15 13:55:00
veracode
veracode
Denial Of Service (DoS)
2020-06-24 03:05:34
Privilege Escalation
2020-06-10 04:58:39
cbl_mariner
cbl_mariner
CVE-2020-12888 affecting package kernel 5.4.91-6
2021-03-03 03:44:27
ubuntucve
ubuntucve
CVE-2020-12888
2020-05-15 00:00:00
CVE-2020-0543
2020-06-09 00:00:00
cve
cve
CVE-2020-12888
2020-05-15 18:15:13
CVE-2020-0543
2020-06-15 14:15:11
attackerkb
attackerkb
CVE-2020-0543 CROSSTALK
2020-06-15 00:00:00
lenovo
lenovo
Intel Special Register Buffer Data Sampling Advisory - Lenovo Support US
2020-06-04 16:44:25
Intel Special Register Buffer Data Sampling Advisory - Lenovo Support NL
2020-06-04 16:44:25
ibm
ibm
Security Bulletin: IBM has released a Unified Extensible Firmware Interface (UEFI) fix in response to an Intel escalation of information disclosure vulnerability
2020-07-14 16:02:22
f5
f5
K25920352 : Intel CPU SRBDS side-channel vulnerability CVE-2020-0543
2020-09-30 00:00:00
K25225860 : Linux kernel vulnerabilities CVE-2019-6454, CVE-2020-12888, and CVE-2020-36385
2022-09-05 00:00:00
xen
xen
Special Register Buffer speculative side channel
2020-06-09 16:33:00
ics
ics
Siemens Industrial Products (Update F)
2022-03-10 12:00:00
suse
suse
Security update for xen (important)
2020-06-16 00:00:00
Security update for ucode-intel (moderate)
2020-06-11 00:00:00
freebsd
freebsd
Intel CPU issues
2020-06-09 00:00:00
intel
intel
Special Register Buffer Data Sampling Advisory
2020-06-12 00:00:00
citrix
citrix
Citrix Hypervisor Security Updates
2020-06-09 04:00:00
virtuozzo
virtuozzo
Important kernel security update: New kernel 2.6.32-042stab145.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2020-06-22 00:00:00
Important kernel security update: New kernel 2.6.32-042stab145.3; Virtuozzo 6.0 Update 12 Hotfix 52 (6.0.12-3759)
2020-06-22 00:00:00
thn
thn
Intel CPUs Vulnerable to New 'SGAxe' and 'CrossTalk' Side-Channel Attacks
2020-06-10 12:59:00
hp
hp
HPSBHF03668 rev. 4 - Intel® 2020.1 IPU Special Register Buffer Data Sampling and Improper Data Forwarding
2020-06-05 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2020-06-10 00:00:00
Intel Microcode vulnerabilities
2020-06-09 00:00:00
Intel Microcode regression
2020-06-10 00:00:00
debian
debian
[SECURITY] [DLA 2248-1] intel-microcode security update
2020-06-13 15:29:48
[SECURITY] [DSA 4701-1] intel-microcode security update
2020-06-11 15:21:45
[SECURITY] [DSA 4701-1] intel-microcode security update
2020-06-11 15:21:45
cloudfoundry
cloudfoundry
USN-4385-2: Intel Microcode regression | Cloud Foundry
2020-06-22 00:00:00
USN-4385-1: Intel Microcode vulnerabilities | Cloud Foundry
2020-06-22 00:00:00
archlinux
archlinux
[ASA-202006-10] intel-ucode: information disclosure
2020-06-13 00:00:00

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.001

Percentile

19.4%

JSON
Related for RHSA-2020:2831
nessus63oraclelinux10redhat23openvas31centos3fedora8nvd2osv18redhatcve2prion2debiancve2cvelist2veracode2cbl_mariner1ubuntucve2cve2attackerkb1lenovo2ibm1f52xen1ics1suse2freebsd1intel1citrix1virtuozzo2thn1hp1ubuntu3debian3cloudfoundry2archlinux1