Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6485-1
HistoryNov 17, 2023 - 12:00 a.m.

Intel Microcode vulnerability

2023-11-1700:00:00
ubuntu.com
45
ubuntu
intel microcode
processor microcode
vulnerability
processor instructions
denial of service
sensitive information
privilege escalation

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

High

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • intel-microcode - Processor microcode for Intel CPUs

Details

Benoit Morgan, Paul Grosen, Thais Moreira Hamasaki, Ke Sun, Alyssa Milburn,
Hisham Shafi, Nir Shlomovich, Tavis Ormandy, Daniel Moghimi, Josh Eads, Salman
Qazi, Alexandra Sandulescu, Andy Nguyen, Eduardo Vela, Doug Kwan, and Kostik
Shtoyk discovered that some Intel® Processors did not properly handle certain
sequences of processor instructions. A local attacker could possibly use this to
cause a core hang (resulting in a denial of service), gain access to sensitive
information or possibly escalate their privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchintel-microcode< 3.20231114.0ubuntu0.23.10.1UNKNOWN
Ubuntu23.04noarchintel-microcode< 3.20231114.0ubuntu0.23.04.1UNKNOWN
Ubuntu22.04noarchintel-microcode< 3.20231114.0ubuntu0.22.04.1UNKNOWN
Ubuntu20.04noarchintel-microcode< 3.20231114.0ubuntu0.20.04.1UNKNOWN
Ubuntu18.04noarchintel-microcode< 3.20231114.0ubuntu0.18.04.1+esm1UNKNOWN
Ubuntu18.04noarchintel-microcode< 3.20230214.0ubuntu0.18.04.1UNKNOWN
Ubuntu16.04noarchintel-microcode< 3.20231114.0ubuntu0.16.04.1+esm1UNKNOWN
Ubuntu16.04noarchintel-microcode< 3.20210216.0ubuntu0.16.04.1UNKNOWN

Related

nessus 17
hp 1
veracode 1
openvas 15
oraclelinux 3
rocky 2
intel 1
ubuntucve 1
fedora 3
osv 4
f5 1
cvelist 1
redhatcve 1
githubexploit 1
mageia 1
cve 1
amazon 2
prion 1
debian 2
cloudlinux 1
cloudfoundry 1
alpinelinux 1
virtuozzo 1
debiancve 1
thn 1
citrix 1
talosblog 1
nessus
nessus
Amazon Linux 2 : microcode_ctl (ALAS-2023-2341)
2023-11-15 00:00:00
Debian DSA-5563-1 : intel-microcode - security update
2023-11-23 00:00:00
Fedora 38 : microcode_ctl (2023-3dfc0123b0)
2023-11-16 00:00:00
hp
hp
Intel 2023.4 IPU Out-of-Band (OOB) Processor Security Update
2023-12-11 00:00:00
veracode
veracode
Privilege Escalation
2023-11-28 03:55:56
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0028)
2024-02-09 00:00:00
Fedora: Security Advisory for microcode_ctl (FEDORA-2023-e4cb865604)
2023-11-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4493-1)
2023-11-22 00:00:00
oraclelinux
oraclelinux
microcode_ctl security update
2023-11-13 00:00:00
microcode_ctl security update
2023-11-16 00:00:00
microcode_ctl security update
2023-11-13 00:00:00
rocky
rocky
microcode_ctl bug fix and enhancement update
2024-05-10 14:32:36
microcode_ctl bug fix and enhancement update
2023-11-28 22:42:52
intel
intel
2023.4 IPU - Intel® Processor Advisory
2023-11-14 00:00:00
ubuntucve
ubuntucve
CVE-2023-23583
2023-11-14 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: microcode_ctl-2.1-53.3.fc37
2023-11-23 01:11:53
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.2.fc38
2023-11-17 01:20:23
[SECURITY] Fedora 39 Update: microcode_ctl-2.1-58.fc39
2023-11-17 01:39:28
osv
osv
intel-microcode vulnerability
2023-11-17 00:12:04
intel-microcode - security update
2023-11-23 00:00:00
CVE-2023-23583
2023-11-14 19:15:18
f5
f5
K000139652: Intel CPU vulnerability CVE-2023-23583
2024-05-16 00:00:00
cvelist
cvelist
CVE-2023-23583
2023-11-14 19:04:24
redhatcve
redhatcve
CVE-2023-23583
2023-11-14 21:09:01
githubexploit
githubexploit
Exploit for Sequence of Processor Instructions Leads to Unexpected Behavior in Intel Core I3-10100Y Firmware
2023-11-22 15:02:49
mageia
mageia
Updated microcode fixes bugs and a security vulnerability
2024-02-09 04:34:03
cve
cve
CVE-2023-23583
2023-11-14 19:15:18
amazon
amazon
Important: microcode_ctl
2023-11-10 20:56:00
Important: microcode_ctl
2023-11-09 19:19:00
prion
prion
Information disclosure
2023-11-14 19:15:00
debian
debian
[SECURITY] [DLA 3690-1] intel-microcode security update
2023-12-16 17:33:14
[SECURITY] [DSA 5563-1] intel-microcode security update
2023-11-23 15:46:30
cloudlinux
cloudlinux
microcode_ctl: Fix of CVE-2023-23583
2023-12-12 22:43:53
cloudfoundry
cloudfoundry
USN-6485-1: Intel Microcode vulnerability | Cloud Foundry
2023-12-04 00:00:00
alpinelinux
alpinelinux
CVE-2023-23583
2023-11-14 19:15:18
virtuozzo
virtuozzo
Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 3 (5.4.4-139)
2023-11-21 00:00:00
debiancve
debiancve
CVE-2023-23583
2023-11-14 19:15:18
thn
thn
Reptar: New Intel CPU Vulnerability Impacts Multi-Tenant Virtualized Environments
2023-11-15 07:52:00
citrix
citrix
Citrix Hypervisor Security Bulletin for CVE-2023-23583 and CVE-2023-46835
2023-11-15 14:46:09
talosblog
talosblog
We all just need to agree that ad blockers are good
2023-11-16 19:00:39

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

High

JSON
Related for USN-6485-1
nessus17hp1veracode1openvas15oraclelinux3rocky2intel1ubuntucve1fedora3osv4f51cvelist1redhatcve1githubexploit1mageia1cve1amazon2prion1debian2cloudlinux1cloudfoundry1alpinelinux1virtuozzo1debiancve1thn1citrix1talosblog1