Lucene search

[email protected]CVE-2019-11135

HistoryNov 14, 2019 - 7:15 p.m.

CVE-2019-11135

2019-11-1419:15:13

[email protected]

web.nvd.nist.gov

434

cve-2019-11135

tsx asynchronous abort

speculative execution

information disclosure

side channel

local access

nvd

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

23.6%

JSON

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Affected configurations

NVD

Node

opensuseleapMatch15.0

opensuseleapMatch15.1

Node

fedoraprojectfedoraMatch30

fedoraprojectfedoraMatch31

Node

slackwareslackwareMatch14.2

Node

hpapollo_4200_firmwareRange<2.20

AND

hpapollo_4200Matchgen10

Node

hpapollo_2000_firmwareRange<2.20

AND

hpapollo_2000Match-

Node

hpproliant_bl460c_firmwareRange<2.20

AND

hpproliant_bl460cMatchgen10

Node

hpproliant_dl580_firmwareRange<2.20

AND

hpproliant_dl580Matchgen10

Node

hpproliant_dl560_firmwareRange<2.20

AND

hpproliant_dl560Matchgen10

Node

hpproliant_dl380_firmwareRange<2.20

AND

hpproliant_dl380Matchgen10

Node

hpproliant_dl360_firmwareRange<2.20

AND

hpproliant_dl360Matchgen10

Node

hpproliant_dl180_firmwareRange<2.20

AND

hpproliant_dl180Matchgen10

Node

hpproliant_dl160_firmwareRange<2.20

AND

hpproliant_dl160Matchgen10

Node

hpproliant_dl120_firmwareRange<2.20

AND

hpproliant_dl120Matchgen10

Node

hpproliant_dl20_firmwareRange<2.10

AND

hpproliant_dl20Matchgen10

Node

hpproliant_ml350_firmwareRange<2.20

AND

hpproliant_ml350Matchgen10

Node

hpproliant_ml110_firmwareRange<2.20

AND

hpproliant_ml110Matchgen10

Node

hpproliant_ml30_firmwareRange<2.10

AND

hpproliant_ml30Matchgen10

Node

hpproliant_xl450_firmwareRange<2.20

AND

hpproliant_xl450Matchgen10

Node

hpproliant_xl270d_firmwareRange<2.20

AND

hpproliant_xl270dMatchgen10

Node

hpproliant_xl230k_firmwareRange<2.20

AND

hpproliant_xl230kMatchgen10

Node

hpproliant_xl190r_firmwareRange<2.20

AND

hpproliant_xl190rMatchgen10

Node

hpproliant_xl170r_firmwareRange<2.20

AND

hpproliant_xl170rMatchgen10

Node

hpsynergy_480_firmwareRange<2.20

AND

hpsynergy_480Matchgen10

Node

hpsynergy_660_firmwareRange<2.20

AND

hpsynergy_660Matchgen10

Node

hpproliant_e910_firmwareRange<2.20

AND

hpproliant_e910Match-

Node

intelcore_i7-10510y_firmwareMatch-

AND

intelcore_i7-10510yMatch-

Node

intelcore_i5-10310y_firmwareMatch-

AND

intelcore_i5-10310yMatch-

Node

intelcore_i5-10210y_firmwareMatch-

AND

intelcore_i5-10210yMatch-

Node

intelcore_i5-10110y_firmwareMatch-

AND

intelcore_i5-10110yMatch-

Node

intelcore_i7-8500y_firmwareMatch-

AND

intelcore_i7-8500yMatch-

Node

intelcore_i5-8310y_firmwareMatch-

AND

intelcore_i5-8310yMatch-

Node

intelcore_i5-8210y_firmwareMatch-

AND

intelcore_i5-8210yMatch-

Node

intelcore_i5-8200y_firmwareMatch-

AND

intelcore_i5-8200yMatch-

Node

intelcore_m3-8100y_firmwareMatch-

AND

intelcore_m3-8100yMatch-

Node

intelxeon_8253_firmwareMatch-

AND

intelxeon_8253Match-

Node

intelxeon_8256_firmwareMatch-

AND

intelxeon_8256Match-

Node

intelxeon_8260_firmwareMatch-

AND

intelxeon_8260Match-

Node

intelxeon_8260l_firmwareMatch-

AND

intelxeon_8260lMatch-

Node

intelxeon_8260m_firmwareMatch-

AND

intelxeon_8260mMatch-

Node

intelxeon_8260y_firmwareMatch-

AND

intelxeon_8260yMatch-

Node

intelxeon_8268_firmwareMatch-

AND

intelxeon_8268Match-

Node

intelxeon_8270_firmwareMatch-

AND

intelxeon_8270Match-

Node

intelxeon_8276_firmwareMatch-

AND

intelxeon_8276Match-

Node

intelxeon_8276l_firmwareMatch-

AND

intelxeon_8276lMatch-

Node

intelxeon_8276m_firmwareMatch-

AND

intelxeon_8276mMatch-

Node

intelxeon_8280_firmwareMatch-

AND

intelxeon_8280Match-

Node

intelxeon_8280l_firmwareMatch-

AND

intelxeon_8280lMatch-

Node

intelxeon_8280m_firmwareMatch-

AND

intelxeon_8280mMatch-

Node

intelxeon_9220_firmwareMatch-

AND

intelxeon_9220Match-

Node

intelxeon_9221_firmwareMatch-

AND

intelxeon_9221Match-

Node

intelxeon_9222_firmwareMatch-

AND

intelxeon_9222Match-

Node

intelxeon_9242_firmwareMatch-

AND

intelxeon_9242Match-

Node

intelxeon_9282_firmwareMatch-

AND

intelxeon_9282Match-

Node

intelxeon_5215_firmwareMatch-

AND

intelxeon_5215Match-

Node

intelxeon_5215l_firmwareMatch-

AND

intelxeon_5215lMatch-

Node

intelxeon_5215m_firmwareMatch-

AND

intelxeon_5215mMatch-

Node

intelxeon_5215r_firmwareMatch-

AND

intelxeon_5215rMatch-

Node

intelxeon_5217_firmwareMatch-

AND

intelxeon_5217Match-

Node

intelxeon_5218_firmwareMatch-

AND

intelxeon_5218Match-

Node

intelxeon_5218b_firmwareMatch-

AND

intelxeon_5218bMatch-

Node

intelxeon_5218n_firmwareMatch-

AND

intelxeon_5218nMatch-

Node

intelxeon_5218t_firmwareMatch-

AND

intelxeon_5218tMatch-

Node

intelxeon_5220_firmwareMatch-

AND

intelxeon_5220Match-

Node

intelxeon_5220r_firmwareMatch-

AND

intelxeon_5220rMatch-

Node

intelxeon_5220s_firmwareMatch-

AND

intelxeon_5220sMatch-

Node

intelxeon_5220t_firmwareMatch-

AND

intelxeon_5220tMatch-

Node

intelxeon_5222_firmwareMatch-

AND

intelxeon_5222Match-

Node

intelxeon_6222v_firmwareMatch-

AND

intelxeon_6222vMatch-

Node

intelxeon_6226_firmwareMatch-

AND

intelxeon_6226Match-

Node

intelxeon_6230_firmwareMatch-

AND

intelxeon_6230Match-

Node

intelxeon_6230n_firmwareMatch-

AND

intelxeon_6230nMatch-

Node

intelxeon_6230t_firmwareMatch-

AND

intelxeon_6230tMatch-

Node

intelxeon_6234_firmwareMatch-

AND

intelxeon_6234Match-

Node

intelxeon_6238_firmwareMatch-

AND

intelxeon_6238Match-

Node

intelxeon_6238l_firmwareMatch-

AND

intelxeon_6238lMatch-

Node

intelxeon_6238m_firmwareMatch-

AND

intelxeon_6238mMatch-

Node

intelxeon_6238t_firmwareMatch-

AND

intelxeon_6238tMatch-

Node

intelxeon_6240_firmwareMatch-

AND

intelxeon_6240Match-

Node

intelxeon_6240l_firmwareMatch-

AND

intelxeon_6240lMatch-

Node

intelxeon_6240m_firmwareMatch-

AND

intelxeon_6240mMatch-

Node

intelxeon_6240y_firmwareMatch-

AND

intelxeon_6240yMatch-

Node

intelxeon_6242_firmwareMatch-

AND

intelxeon_6242Match-

Node

intelxeon_6244_firmwareMatch-

AND

intelxeon_6244Match-

Node

intelxeon_6246_firmwareMatch-

AND

intelxeon_6246Match-

Node

intelxeon_6248_firmwareMatch-

AND

intelxeon_6248Match-

Node

intelxeon_6252_firmwareMatch-

AND

intelxeon_6252Match-

Node

intelxeon_6252n_firmwareMatch-

AND

intelxeon_6252nMatch-

Node

intelxeon_6254_firmwareMatch-

AND

intelxeon_6254Match-

Node

intelxeon_6262v_firmwareMatch-

AND

intelxeon_6262vMatch-

Node

intelxeon_4208_firmwareMatch-

AND

intelxeon_4208Match-

Node

intelxeon_4208r_firmwareMatch-

AND

intelxeon_4208rMatch-

Node

intelxeon_4209t_firmwareMatch-

AND

intelxeon_4209tMatch-

Node

intelxeon_4210_firmwareMatch-

AND

intelxeon_4210Match-

Node

intelxeon_4210r_firmwareMatch-

AND

intelxeon_4210rMatch-

Node

intelxeon_4214_firmwareMatch-

AND

intelxeon_4214Match-

Node

intelxeon_4214c_firmwareMatch-

AND

intelxeon_4214cMatch-

Node

intelxeon_4214r_firmwareMatch-

AND

intelxeon_4214rMatch-

Node

intelxeon_4214y_firmwareMatch-

AND

intelxeon_4214yMatch-

Node

intelxeon_4215_firmwareMatch-

AND

intelxeon_4215Match-

Node

intelxeon_4216_firmwareMatch-

AND

intelxeon_4216Match-

Node

intelxeon_4216r_firmwareMatch-

AND

intelxeon_4216rMatch-

Node

intelxeon_3204_firmwareMatch-

AND

intelxeon_3204Match-

Node

intelxeon_3206r_firmwareMatch-

AND

intelxeon_3206rMatch-

Node

intelxeon_w-3275m_firmwareMatch-

AND

intelxeon_w-3275mMatch-

Node

intelxeon_w-3275_firmwareMatch-

AND

intelxeon_w-3275Match-

Node

intelxeon_w-3265m_firmwareMatch-

AND

intelxeon_w-3265mMatch-

Node

intelxeon_w-3265_firmwareMatch-

AND

intelxeon_w-3265Match-

Node

intelxeon_w-3245m_firmwareMatch-

AND

intelxeon_w-3245mMatch-

Node

intelxeon_w-3245_firmwareMatch-

AND

intelxeon_w-3245Match-

Node

intelxeon_w-3235_firmwareMatch-

AND

intelxeon_w-3235Match-

Node

intelxeon_w-3225_firmwareMatch-

AND

intelxeon_w-3225Match-

Node

intelxeon_w-3223_firmwareMatch-

AND

intelxeon_w-3223Match-

Node

intelxeon_w-2295_firmwareMatch-

AND

intelxeon_w-2295Match-

Node

intelxeon_w-2275_firmwareMatch-

AND

intelxeon_w-2275Match-

Node

intelxeon_w-2265_firmwareMatch-

AND

intelxeon_w-2265Match-

Node

intelxeon_w-2255_firmwareMatch-

AND

intelxeon_w-2255Match-

Node

intelxeon_w-2245_firmwareMatch-

AND

intelxeon_w-2245Match-

Node

intelxeon_w-2235_firmwareMatch-

AND

intelxeon_w-2235Match-

Node

intelxeon_w-2225_firmwareMatch-

AND

intelxeon_w-2225Match-

Node

intelxeon_w-2223_firmwareMatch-

AND

intelxeon_w-2223Match-

Node

intelcore_i9-9980hk_firmwareMatch-

AND

intelcore_i9-9980hkMatch-

Node

intelcore_i9-9880h_firmwareMatch-

AND

intelcore_i9-9880hMatch-

Node

intelcore_i7-9850h_firmwareMatch-

AND

intelcore_i7-9850hMatch-

Node

intelcore_i7-9750hf_firmwareMatch-

AND

intelcore_i7-9750hfMatch-

Node

intelcore_i5-9400h_firmwareMatch-

AND

intelcore_i5-9400hMatch-

Node

intelcore_i5-9300h_firmwareMatch-

AND

intelcore_i5-9300hMatch-

Node

intelcore_i9-9900k_firmwareMatch-

AND

intelcore_i9-9900kMatch-

Node

intelcore_i9-9900kf_firmwareMatch-

AND

intelcore_i9-9900kfMatch-

Node

intelcore_i7-9700k_firmwareMatch-

AND

intelcore_i7-9700kMatch-

Node

intelcore_i7-9700kf_firmwareMatch-

AND

intelcore_i7-9700kfMatch-

Node

intelcore_i5-9600k_firmwareMatch-

AND

intelcore_i5-9600kMatch-

Node

intelcore_i5-9600kf_firmwareMatch-

AND

intelcore_i5-9600kfMatch-

Node

intelcore_i5-9400_firmwareMatch-

AND

intelcore_i5-9400Match-

Node

intelcore_i5-9400f_firmwareMatch-

AND

intelcore_i5-9400fMatch-

Node

intelxeon_e-2288g_firmwareMatch-

AND

intelxeon_e-2288gMatch-

Node

intelxeon_e-2286m_firmwareMatch-

AND

intelxeon_e-2286mMatch-

Node

intelxeon_e-2278gel_firmwareMatch-

AND

intelxeon_e-2278gelMatch-

Node

intelxeon_e-2278ge_firmwareMatch-

AND

intelxeon_e-2278geMatch-

Node

intelxeon_e-2278g_firmwareMatch-

AND

intelxeon_e-2278gMatch-

Node

intelcore_i7-10510u_firmwareMatch-

AND

intelcore_i7-10510uMatch-

Node

intelcore_i5-10210u_firmwareMatch-

AND

intelcore_i5-10210uMatch-

Node

intelpentium_6405u_firmwareMatch-

AND

intelpentium_6405uMatch-

Node

intelceleron_5305u_firmwareMatch-

AND

intelceleron_5305uMatch-

Node

intelcore_i7-8565u_firmwareMatch-

AND

intelcore_i7-8565uMatch-

Node

intelcore_i7-8665u_firmwareMatch-

AND

intelcore_i7-8665uMatch-

Node

intelcore_i5-8365u_firmwareMatch-

AND

intelcore_i5-8365uMatch-

Node

intelcore_i5-8265u_firmwareMatch-

AND

intelcore_i5-8265uMatch-

Node

canonicalubuntu_linuxMatch14.04esm

Node

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

Node

redhatcodeready_linux_builderMatch8.0

redhatcodeready_linux_builder_eusMatch8.1

redhatcodeready_linux_builder_eusMatch8.2

redhatcodeready_linux_builder_eusMatch8.4

redhatcodeready_linux_builder_eusMatch8.6

redhatvirtualization_managerMatch4.2

redhatenterprise_linuxMatch8.0

redhatenterprise_linux_desktopMatch7.0

redhatenterprise_linux_eusMatch7.6

redhatenterprise_linux_eusMatch7.7

redhatenterprise_linux_eusMatch8.1

redhatenterprise_linux_eusMatch8.2

redhatenterprise_linux_eusMatch8.4

redhatenterprise_linux_eusMatch8.6

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_server_ausMatch7.6

redhatenterprise_linux_server_ausMatch7.7

redhatenterprise_linux_server_ausMatch8.2

redhatenterprise_linux_server_ausMatch8.4

redhatenterprise_linux_server_ausMatch8.6

redhatenterprise_linux_server_tusMatch7.6

redhatenterprise_linux_server_tusMatch7.7

redhatenterprise_linux_server_tusMatch8.2

redhatenterprise_linux_server_tusMatch8.4

redhatenterprise_linux_server_tusMatch8.6

redhatenterprise_linux_workstationMatch7.0

Node

oraclezfs_storage_appliance_kitMatch8.8

CPENameOperatorVersion
opensuse:leapopensuse leapeq15.0
opensuse:leapopensuse leapeq15.1

CPE	Name	Operator	Version
opensuse:leap	opensuse leap	eq	15.0
opensuse:leap	opensuse leap	eq	15.1

CNA Affected

[
  {
    "product": "2019.2 IPU – TSX Asynchronous Abort",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See provided reference"
      }
    ]
  }
]

References

lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html

lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html

lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.html

packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

www.openwall.com/lists/oss-security/2019/12/10/3

www.openwall.com/lists/oss-security/2019/12/10/4

www.openwall.com/lists/oss-security/2019/12/11/1

access.redhat.com/errata/RHSA-2019:3936

access.redhat.com/errata/RHSA-2020:0026

access.redhat.com/errata/RHSA-2020:0028

access.redhat.com/errata/RHSA-2020:0204

access.redhat.com/errata/RHSA-2020:0279

access.redhat.com/errata/RHSA-2020:0366

access.redhat.com/errata/RHSA-2020:0555

access.redhat.com/errata/RHSA-2020:0666

access.redhat.com/errata/RHSA-2020:0730

kc.mcafee.com/corporate/index?page=content&id=SB10306

lists.debian.org/debian-lts-announce/2019/12/msg00035.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/

seclists.org/bugtraq/2019/Dec/28

seclists.org/bugtraq/2019/Nov/26

seclists.org/bugtraq/2020/Jan/21

security.gentoo.org/glsa/202003-56

support.f5.com/csp/article/K02912734?utm_source=f5support&amp%3Butm_medium=RSS

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03968en_us

usn.ubuntu.com/4186-2/

www.debian.org/security/2020/dsa-4602

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00270.html

www.oracle.com/security-alerts/cpujan2021.html

Social References

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

23.6%

JSON

CVE-2019-11135

Affected configurations

CNA Affected

References

Social References

Related