Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-11091

Опубликовано: 14 мая 2019
Источник: redhat
CVSS3: 3.8
EPSS Низкий

Описание

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Отчет

Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the 'Vulnerability Response' URL.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kernelWill not fix
Red Hat Enterprise Linux 7kernel-altNot affected
Red Hat Virtualization 4ovirt-guest-agentAffected
Red Hat Enterprise Linux 6kernelFixedRHSA-2019:116914.05.2019
Red Hat Enterprise Linux 6libvirtFixedRHSA-2019:118014.05.2019
Red Hat Enterprise Linux 6qemu-kvmFixedRHSA-2019:118114.05.2019
Red Hat Enterprise Linux 6.5 Advanced Update SupportkernelFixedRHSA-2019:119614.05.2019
Red Hat Enterprise Linux 6.5 Advanced Update SupportlibvirtFixedRHSA-2019:119714.05.2019
Red Hat Enterprise Linux 6.5 Advanced Update Supportqemu-kvmFixedRHSA-2019:119814.05.2019
Red Hat Enterprise Linux 6.6 Advanced Update SupportkernelFixedRHSA-2019:119314.05.2019

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-226->CWE-203->CWE-385
https://bugzilla.redhat.com/show_bug.cgi?id=1705312hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

EPSS

Процентиль: 82%
0.0173
Низкий

3.8 Low

CVSS3

Связанные уязвимости

CVSS3: 5.6
ubuntu
около 6 лет назад

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

CVSS3: 5.6
nvd
около 6 лет назад

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

CVSS3: 5.6
debian
около 6 лет назад

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheab ...

CVSS3: 5.6
github
около 3 лет назад

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

CVSS3: 5.6
fstec
больше 6 лет назад

Уязвимость процессоров Intel, связанная с микроархитектурной выборкой данных некэшируемой памяти (MDSUM), позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 82%
0.0173
Низкий

3.8 Low

CVSS3