p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости intel-microcode · Страница 5

За последние 30 дней в intel-microcode опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 100

  1. CVE-2020-24511

    Средний · CVSS 6.5EPSS 0,4%Есть исправление

    CVE-2020-24511

    Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

    • Обновитесь до 3.20210608.1
  2. CVE-2020-8695

    Средний · CVSS 5.5EPSS 0,42%Есть исправление

    CVE-2020-8695

    Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

    • Обновитесь до 3.20201110.1
    Опубликовано Обновлено
  3. CVE-2020-8696

    Средний · CVSS 5.5EPSS 0,44%Есть исправление

    CVE-2020-8696

    Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

    • Обновитесь до 3.20201110.1
    Опубликовано Обновлено
  4. CVE-2020-8698

    Средний · CVSS 5.5EPSS 0,52%Есть исправление

    CVE-2020-8698

    Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

    • Обновитесь до 3.20201110.1
    Опубликовано Обновлено
  5. CVE-2020-0543

    Средний · CVSS 5.5EPSS 0,54%Есть исправление

    CVE-2020-0543

    Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

    • Обновитесь до 3.20200609.1
  6. CVE-2020-0549

    Средний · CVSS 5.5EPSS 0,56%Есть исправление

    CVE-2020-0549

    Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

    • Обновитесь до 3.20200609.1
    Опубликовано Обновлено
  7. CVE-2020-0548

    Средний · CVSS 5.5EPSS 0,52%Есть исправление

    CVE-2020-0548

    Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

    • Обновитесь до 3.20200609.1
    Опубликовано Обновлено
  8. CVE-2019-14607

    Средний · CVSS 5.3EPSS 0,34%Есть исправление

    CVE-2019-14607

    Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of privilege, denial of service and/or information disclosure via local access.

    • Обновитесь до 3.20191115.1
    Опубликовано Обновлено
  9. CVE-2019-11135

    Средний · CVSS 6.5EPSS 3,13%Есть исправление

    CVE-2019-11135

    TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

    • Обновитесь до 3.20191112.1
  10. CVE-2019-11139

    Средний · CVSS 6EPSS 0,36%Есть исправление

    CVE-2019-11139

    Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

    • Обновитесь до 3.20191112.1
    Опубликовано Обновлено
  11. CVE-2018-12130

    Средний · CVSS 5.9EPSS 1,55%Есть исправление

    CVE-2018-12130

    Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

    • Обновитесь до 3.20190514.1
  12. CVE-2018-12127

    Средний · CVSS 5.6EPSS 1,5%Есть исправление

    CVE-2018-12127

    Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

    • Обновитесь до 3.20190514.1
  13. CVE-2018-12126

    Средний · CVSS 5.6EPSS 1,51%Есть исправление

    CVE-2018-12126

    Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

    • Обновитесь до 3.20190514.1
  14. CVE-2019-11091

    Средний · CVSS 5.6EPSS 0,61%Есть исправление

    CVE-2019-11091

    Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

    • Обновитесь до 3.20190514.1
  15. CVE-2018-3646

    Средний · CVSS 5.6EPSS 8,1%Есть исправление

    CVE-2018-3646

    Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

    • Обновитесь до 3.20180703.1
  16. CVE-2018-3620

    Средний · CVSS 5.6EPSS 5,58%Есть исправление

    CVE-2018-3620

    Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

    • Обновитесь до 3.20180703.1
  17. CVE-2018-3615

    Высокий · CVSS 7.3EPSS 6,3%Есть исправление

    CVE-2018-3615

    Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

    • Обновитесь до 3.20180703.1
  18. CVE-2018-3640

    Средний · CVSS 5.6EPSS 7,27%Есть исправление

    CVE-2018-3640

    Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

    • Обновитесь до 3.20180703.1
    Опубликовано Обновлено
  19. CVE-2018-3639

    Средний · CVSS 5.5EPSS 60,63%Публичный эксплойтЕсть исправление

    CVE-2018-3639

    Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

    • Обновитесь до 3.20180703.1
  20. CVE-2017-5715

    Средний · CVSS 5.6EPSS 73,25%Публичный эксплойтЕсть исправление

    CVE-2017-5715

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

    • Обновитесь до 3.20180425.1

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →