Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:20242
HistoryMay 16, 2019 - 4:01 a.m.

Information Disclosure

2019-05-1604:01:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

JSON

The kernel package is vulnerable to information disclosure. The attack is possible due to uncacheable memory on some microprocessors utilizing speculative execution, allowing an authenticated user to disclose information via a side channel with local access.

Related

f5 1
osv 6
debiancve 1
prion 1
nessus 79
redhatcve 1
cve 1
ubuntucve 1
oraclelinux 8
ibm 4
suse 5
debian 6
redhat 25
centos 3
virtuozzo 2
amazon 3
ubuntu 4
openvas 34
vmware 2
lenovo 2
hp 1
fedora 2
cloudfoundry 2
mageia 2
threatpost 1
paloalto 1
citrix 1
f5
f5
K34303485 : Microarchitectural Data Sampling Uncacheable Memory (MDSUM) CVE-2019-11091
2019-05-15 00:00:00
osv
osv
CVE-2019-11091
2019-05-30 16:29:01
intel-microcode - security update
2019-06-20 00:00:00
linux - security update
2019-05-14 00:00:00
debiancve
debiancve
CVE-2019-11091
2019-05-30 16:29:00
prion
prion
Information disclosure
2019-05-30 16:29:00
nessus
nessus
F5 Networks BIG-IP : Microarchitectural Data Sampling Uncacheable Memory (MDSUM) (K34303485)
2023-11-02 00:00:00
RHEL 6 : qemu-kvm (RHSA-2019:1181) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)
2019-05-14 00:00:00
Oracle Linux 6 : qemu-kvm (ELSA-2019-1181) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)
2019-05-15 00:00:00
redhatcve
redhatcve
CVE-2019-11091
2021-06-27 13:54:48
cve
cve
CVE-2019-11091
2019-05-30 16:29:00
ubuntucve
ubuntucve
CVE-2019-11091
2019-05-14 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2019-05-14 00:00:00
qemu-kvm security update
2019-05-15 00:00:00
libvirt security update
2019-05-14 00:00:00
ibm
ibm
Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091 (known as MDS).
2021-09-22 23:05:38
Security Bulletin: Vulnerabilities in Intel CPUs affect IBM Integrated Analytics System
2019-10-18 04:00:14
Security Bulletin: Microarchitectural Data Sampling (MDS) Vulnerabilites affect OS Image for RedHat Linux for IBM Cloud Pak System
2020-05-06 12:17:56
suse
suse
Security update for ucode-intel (important)
2019-05-28 00:00:00
Security update for ucode-intel (important)
2019-07-24 00:00:00
Security update for libvirt (important)
2019-06-03 00:00:00
debian
debian
[SECURITY] [DLA 1789-2] intel-microcode security update
2019-06-20 21:50:38
[SECURITY] [DSA 4447-1] intel-microcode security update
2019-05-15 09:23:15
[SECURITY] [DSA 4447-2] intel-microcode security update
2019-06-20 06:41:32
redhat
redhat
(RHSA-2019:1184) Important: libvirt security update
2019-05-14 18:09:20
(RHSA-2019:1178) Important: qemu-kvm security update
2019-05-14 17:23:31
(RHSA-2019:1177) Important: libvirt security update
2019-05-14 17:23:25
centos
centos
kernel, perf, python security update
2019-05-15 15:42:15
qemu security update
2019-05-15 15:40:19
bpftool, kernel, perf, python security update
2019-05-15 20:35:38
virtuozzo
virtuozzo
Important kernel security update: New kernel 2.6.32-042stab138.1; Virtuozzo 6.0 Update 12 Hotfix 40 (6.0.12-3739)
2019-05-16 00:00:00
Important kernel security update: New kernel 2.6.32-042stab138.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2019-05-16 00:00:00
amazon
amazon
Important: qemu-kvm
2019-08-07 23:12:00
Important: kernel
2019-05-07 22:39:00
Important: kernel
2019-05-07 22:54:00
ubuntu
ubuntu
libvirt update
2019-05-16 00:00:00
Intel Microcode update
2019-05-14 00:00:00
Linux kernel vulnerabilities
2019-05-15 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1789-2)
2019-05-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:14133-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-3977-2)
2019-05-23 00:00:00
vmware
vmware
VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091)
2019-05-14 00:00:00
VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091)
2019-05-14 00:00:00
lenovo
lenovo
Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities - US
2019-05-14 16:38:15
Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities - Lenovo Support US
2019-05-14 16:38:15
hp
hp
HPSBHF03618 rev. 8 - Intel Microarchitectural Data Sampling Security Updates
2019-05-14 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: libvirt-5.1.0-5.fc30
2019-05-17 01:08:36
[SECURITY] Fedora 30 Update: xen-4.11.1-6.fc30
2019-07-01 01:09:24
cloudfoundry
cloudfoundry
USN-3977-2: Intel Microcode update (AKA ZombieLoad Attack) | Cloud Foundry
2019-05-29 00:00:00
USN-3977-1: Intel Microcode update (AKA ZombieLoad Attack) | Cloud Foundry
2019-05-20 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2019-05-16 11:25:22
Updated kernel packages fix security vulnerability
2019-05-16 11:25:22
threatpost
threatpost
Intel ZombieLoad Side-Channel Attack: 10 Takeaways
2019-05-15 16:48:11
paloalto
paloalto
Information about Recent Intel Side Channel Vulnerabilities
2019-05-29 00:00:00
citrix
citrix
Citrix Hypervisor Security Update
2019-05-14 04:00:00

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

JSON
Related for VERACODE:20242
f51osv6debiancve1prion1nessus79redhatcve1cve1ubuntucve1oraclelinux8ibm4suse5debian6redhat25centos3virtuozzo2amazon3ubuntu4openvas34vmware2lenovo2hp1fedora2cloudfoundry2mageia2threatpost1paloalto1citrix1