Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4628-1
HistoryNov 11, 2020 - 12:00 a.m.

Intel Microcode vulnerabilities

2020-11-1100:00:00
ubuntu.com
82

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.1%

JSON

Releases

  • Ubuntu 20.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • intel-microcode - Processor microcode for Intel CPUs

Details

Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine
Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running
Average Power Limit (RAPL) feature of some Intel processors allowed a side-
channel attack based on power consumption measurements. A local attacker
could possibly use this to expose sensitive information. (CVE-2020-8695)

Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that
some Intel® Processors did not properly remove sensitive information
before storage or transfer in some situations. A local attacker could
possibly use this to expose sensitive information. (CVE-2020-8696)

Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that
some Intel® Processors did not properly isolate shared resources in some
situations. A local attacker could possibly use this to expose sensitive
information. (CVE-2020-8698)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.10noarchintel-microcode< 3.20201110.0ubuntu0.20.10.1UNKNOWN
Ubuntu20.04noarchintel-microcode< 3.20201110.0ubuntu0.20.04.1UNKNOWN
Ubuntu18.04noarchintel-microcode< 3.20201110.0ubuntu0.18.04.1UNKNOWN
Ubuntu16.04noarchintel-microcode< 3.20201110.0ubuntu0.16.04.1UNKNOWN
Ubuntu14.04noarchintel-microcode< 3.20201110.0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchintel-microcode< 3.20190618.0ubuntu0.14.04.1UNKNOWN

Related

nessus 82
openvas 23
redhat 22
ubuntu 2
suse 4
fedora 4
osv 8
cloudfoundry 3
centos 2
debian 1
mageia 2
oraclelinux 9
f5 2
archlinux 1
intel 2
citrix 1
almalinux 1
rocky 1
cve 3
prion 3
debiancve 3
alpinelinux 1
redhatcve 3
ubuntucve 3
veracode 3
amazon 1
cnvd 1
lenovo 3
github 2
hp 1
threatpost 1
ics 1
nessus
nessus
Fedora 33 : 2:microcode_ctl (2020-2c8824c6b1)
2020-11-23 00:00:00
CentOS 7 : microcode_ctl (CESA-2020:5083)
2020-11-19 00:00:00
RHEL 8 : microcode_ctl (RHSA-2020:5186)
2020-11-24 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3514-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:14546-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-2546-1)
2021-02-06 00:00:00
redhat
redhat
(RHSA-2020:5190) Moderate: microcode_ctl security, bug fix, and enhancement update
2020-11-23 18:42:23
(RHSA-2020:5188) Moderate: microcode_ctl security, bug fix and enhancement update
2020-11-23 18:41:18
(RHSA-2020:5085) Moderate: microcode_ctl security, bug fix and enhancement update
2020-11-11 09:27:53
ubuntu
ubuntu
Intel Microcode regression
2020-11-12 00:00:00
Intel Microcode vulnerabilities
2021-05-17 00:00:00
suse
suse
Security update for ucode-intel (important)
2020-11-29 00:00:00
Security update for ucode-intel (important)
2020-11-27 00:00:00
Security update for ucode-intel (moderate)
2020-11-14 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: microcode_ctl-2.1-39.2.fc31
2020-11-20 01:29:29
[SECURITY] Fedora 33 Update: microcode_ctl-2.1-43.fc33
2020-11-22 01:27:43
[SECURITY] Fedora 32 Update: microcode_ctl-2.1-39.3.fc32
2020-11-29 01:15:00
osv
osv
intel-microcode - security update
2021-02-06 00:00:00
intel-microcode vulnerabilities
2020-11-11 06:56:58
intel-microcode regression
2020-11-12 01:14:30
cloudfoundry
cloudfoundry
USN-4628-2: Intel Microcode regression | Cloud Foundry
2020-12-11 00:00:00
USN-4628-3: Intel Microcode vulnerabilities | Cloud Foundry
2021-06-11 00:00:00
USN-4628-1: Intel Microcode vulnerabilities | Cloud Foundry
2020-12-11 00:00:00
centos
centos
microcode_ctl security update
2020-11-19 13:47:47
microcode_ctl security update
2021-08-09 15:29:53
debian
debian
[SECURITY] [DLA 2546-1] intel-microcode security update
2021-02-05 18:48:10
mageia
mageia
Updated microcode package fixes security vulnerabilities
2020-11-14 00:20:36
Updated microcode package fixes security vulnerabilities
2021-03-17 09:16:07
oraclelinux
oraclelinux
microcode_ctl security, bug fix, and enhancement update
2020-11-17 00:00:00
microcode_ctl security, bug fix and enhancement update
2020-11-17 00:00:00
microcode_ctl security, bug fix, and enhancement update
2020-11-17 00:00:00
f5
f5
K63290144 : Intel processor vulnerabilities CVE-2020-8696 and CVE-2020-8698
2020-11-20 00:00:00
K32512431 : Linux kernel vulnerabilities CVE-2020-8694 and CVE-2020-8695
2020-11-24 00:00:00
archlinux
archlinux
[ASA-202102-34] intel-ucode: information disclosure
2021-02-27 00:00:00
intel
intel
2020.2 IPU - Intel® Processor Advisory
2021-02-16 00:00:00
2020.2 IPU - Intel® RAPL Interface Advisory
2021-05-11 00:00:00
citrix
citrix
Citrix Hypervisor Security Update
2020-11-12 04:00:00
almalinux
almalinux
Important: microcode_ctl security, bug fix and enhancement update
2021-08-09 09:19:57
rocky
rocky
microcode_ctl security, bug fix and enhancement update
2021-08-09 09:19:57
cve
cve
CVE-2020-8698
2020-11-12 18:15:00
CVE-2020-8696
2020-11-12 18:15:00
CVE-2020-8695
2020-11-12 18:15:00
prion
prion
Design/Logic Flaw
2020-11-12 18:15:00
Information disclosure
2020-11-12 18:15:00
Input validation
2020-11-12 18:15:00
debiancve
debiancve
CVE-2020-8698
2020-11-12 18:15:00
CVE-2020-8695
2020-11-12 18:15:00
CVE-2020-8696
2020-11-12 18:15:00
alpinelinux
alpinelinux
CVE-2020-8698
2020-11-12 18:15:00
redhatcve
redhatcve
CVE-2020-8698
2022-05-14 12:39:12
CVE-2020-8696
2021-08-01 16:11:20
CVE-2020-8695
2020-11-10 19:52:48
ubuntucve
ubuntucve
CVE-2020-8698
2020-11-10 00:00:00
CVE-2020-8696
2020-11-10 00:00:00
CVE-2020-8695
2020-11-10 00:00:00
veracode
veracode
Information Disclosure
2020-11-12 07:53:06
Information Disclosure
2020-11-12 07:53:07
Information Disclosure
2020-11-12 07:53:05
amazon
amazon
Medium: microcode_ctl
2021-06-16 20:37:00
cnvd
cnvd
Intel Processors Information Disclosure Vulnerability (CNVD-2022-05687)
2021-10-13 00:00:00
lenovo
lenovo
Intel RAPL Interface Advisory - Lenovo Support NL
2020-11-04 15:35:53
Intel RAPL Interface Advisory - Lenovo Support US
2020-11-04 15:35:53
Multi-vendor BIOS Security Vulnerabilities (November 2020) - Lenovo Support NL
2020-11-04 15:47:25
github
github
/sys/devices/virtual/powercap accessible by default to containers
2023-10-30 15:25:44
containerd allows RAPL to be accessible to a container
2023-12-19 21:17:06
hp
hp
HPSBHF03705 rev. 6 - BIOS November 2020 Security Updates
2020-11-09 00:00:00
threatpost
threatpost
Nvidia Warns Windows Gamers of GeForce NOW Flaw
2020-11-11 19:03:15
ics
ics
Siemens Industrial PCs and CNC devices (Update A)
2022-12-15 12:00:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.1%

JSON
Related for USN-4628-1
nessus82openvas23redhat22ubuntu2suse4fedora4osv8cloudfoundry3centos2debian1mageia2oraclelinux9f52archlinux1intel2citrix1almalinux1rocky1cve3prion3debiancve3alpinelinux1redhatcve3ubuntucve3veracode3amazon1cnvd1lenovo3github2hp1threatpost1ics1