Information Disclosure

🗓️ 16 Mar 2024 11:06:02Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

intel-microcode vulnerability, non-transparent sharing of return predictor targets, local access ris

Reporter	Title	Published	Views	Family All 95
Tenable Nessus	Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-559)	13 Mar 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : microcode_ctl (ALAS-2024-2491)	12 Mar 202400:00	–	nessus
Tenable Nessus	Debian dla-3808 : intel-microcode - security update	4 May 202400:00	–	nessus
Tenable Nessus	Fedora 40 : microcode_ctl (2024-96f3c3f3d3)	8 Aug 202400:00	–	nessus
Tenable Nessus	Fedora 39 : microcode_ctl (2024-f3692f8528)	13 Aug 202400:00	–	nessus
Tenable Nessus	FreeBSD : Intel CPUs -- multiple vulnerabilities (b6dd9d93-e09b-11ee-92fc-1c697a616631)	13 Mar 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : microcode_ctl-20240910-1.el9 (AXSA:2024-9072:11)	20 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 9 : microcode_ctl (ELSA-2024-9401)	19 Nov 202400:00	–	nessus
Tenable Nessus	RHEL 9 : microcode_ctl (RHSA-2024:9401)	12 Nov 202400:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus

Vulners

Node

intel-microcode intel-microcodeMatch3.20201110.1debian

AND

debian debian_linuxMatch999

intel-ucode intel-ucodeMatch20230516a-r0os

AND

intel-ucode intel-ucodeMatch20230214-r0os

AND

intel-ucode intel-ucodeMatch20231114-r0os

AND

intel-ucode intel-ucodeMatch20220510-r0os

AND

intel-ucode intel-ucodeMatch20220419-r0os

AND

intel-ucode intel-ucodeMatch20230512-r0os

AND

intel-ucode intel-ucodeMatch20210608-r0os

AND

intel-ucode intel-ucodeMatch20230613-r0os

AND

intel-ucode intel-ucodeMatch20200520-r0os

AND

intel-ucode intel-ucodeMatch20210216-r0os

AND

intel-ucode intel-ucodeMatch20221108-r0os

AND

intel-ucode intel-ucodeMatch20191115-r0os

AND

intel-ucode intel-ucodeMatch20220809-r0os

AND

intel-ucode intel-ucodeMatch20220207-r0os

AND

intel-ucode intel-ucodeMatch20240312-r0os

AND

intel-ucode intel-ucodeMatch20230808-r0os

AND

alpinelinux alpine_linuxMatchedge

intel-microcode intel-microcodeMatch3.20201118.1~deb10u1debian

AND

intel-microcode intel-microcodeMatch3.20200616.1~deb10u1debian

AND

debian debian_linuxMatch10

intel-ucode intel-ucodeMatch20231114-r0os

AND

intel-ucode intel-ucodeMatch20230808-r0os

AND

alpinelinux alpine_linuxMatch3.19

intel-microcode intel-microcodeMatch3.20201110.1debian

AND

debian debian_linuxMatch11

intel-ucode intel-ucodeMatch20230214-r0os

AND

intel-ucode intel-ucodeMatch20230516a-r0os

AND

intel-ucode intel-ucodeMatch20230613-r0os

AND

intel-ucode intel-ucodeMatch20231114-r0os

AND

intel-ucode intel-ucodeMatch20230808-r0os

AND

intel-ucode intel-ucodeMatch20230512-r0os

AND

alpinelinux alpine_linuxMatch3.18

intel-ucode intel-ucodeMatch20230613-r0os

AND

intel-ucode intel-ucodeMatch20231114-r0os

AND

intel-ucode intel-ucodeMatch20220809-r0os

AND

intel-ucode intel-ucodeMatch20230516a-r0os

AND

intel-ucode intel-ucodeMatch20230214-r0os

AND

intel-ucode intel-ucodeMatch20230808-r0os

AND

intel-ucode intel-ucodeMatch20230512-r0os

AND

alpinelinux alpine_linuxMatch3.17

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-38575
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html
lists	www.lists.debian.org/debian-lts-announce/2024/05/msg00003.html
security	www.security.netapp.com/advisory/ntap-20240405-0008/

04 May 2024 18:37Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.5

EPSS0.00027

SSVC