rpm package
suse/ucode-intel&distro=SUSE OpenStack Cloud Crowbar 8
pkg:rpm/suse/ucode-intel&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208
Vulnerabilities (21)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-21151 | Med | 5.5 | < 20220510-13.97.1 | 20220510-13.97.1 | May 12, 2022 | Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2021-33120 | Med | 5.4 | < 20220207-13.93.1 | 20220207-13.93.1 | Feb 9, 2022 | Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access. | |
| CVE-2021-0145 | Med | 5.5 | < 20220207-13.93.1 | 20220207-13.93.1 | Feb 9, 2022 | Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2021-0127 | Med | 5.5 | < 20220207-13.93.1 | 20220207-13.93.1 | Feb 9, 2022 | Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access. | |
| CVE-2021-0146 | Med | 6.8 | < 20220207-13.93.1 | 20220207-13.93.1 | Nov 17, 2021 | Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. | |
| CVE-2020-24489 | Hig | 8.8 | < 20210525-13.90.1 | 20210525-13.90.1 | Jun 9, 2021 | Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. | |
| CVE-2020-24513 | Med | 6.5 | < 20210525-13.90.1 | 20210525-13.90.1 | Jun 9, 2021 | Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2020-24512 | Low | 3.3 | < 20210525-13.90.1 | 20210525-13.90.1 | Jun 9, 2021 | Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2020-24511 | Med | 6.5 | < 20210525-13.90.1 | 20210525-13.90.1 | Jun 9, 2021 | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2020-8698 | Med | 5.5 | < 20201027-13.76.1 | 20201027-13.76.1 | Nov 12, 2020 | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2020-8696 | Med | 5.5 | < 20201118-13.81.1 | 20201118-13.81.1 | Nov 12, 2020 | Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2020-8695 | Med | 5.5 | < 20201027-13.76.1 | 20201027-13.76.1 | Nov 12, 2020 | Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. | |
| CVE-2020-0543 | Med | 5.5 | < 20200602-13.68.1 | 20200602-13.68.1 | Jun 15, 2020 | Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2020-0549 | Med | 5.5 | < 20200602-13.68.1 | 20200602-13.68.1 | Jan 28, 2020 | Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2020-0548 | Med | 5.5 | < 20200602-13.68.1 | 20200602-13.68.1 | Jan 28, 2020 | Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | |
| CVE-2019-11139 | Med | 6.0 | < 20191112-13.53.1 | 20191112-13.53.1 | Nov 14, 2019 | Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access. | |
| CVE-2019-11135 | Med | 6.5 | < 20191112-13.53.1 | 20191112-13.53.1 | Nov 14, 2019 | TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. | |
| CVE-2019-11091 | Med | 5.6 | < 20190618-13.47.1 | 20190618-13.47.1 | May 30, 2019 | Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products c | |
| CVE-2018-12130 | Med | 5.9 | < 20190618-13.47.1 | 20190618-13.47.1 | May 30, 2019 | Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found h | |
| CVE-2018-12127 | Med | 5.6 | < 20190618-13.47.1 | 20190618-13.47.1 | May 30, 2019 | Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: |
- affected < 20220510-13.97.1fixed 20220510-13.97.1
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20220207-13.93.1fixed 20220207-13.93.1
Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.
- affected < 20220207-13.93.1fixed 20220207-13.93.1
Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20220207-13.93.1fixed 20220207-13.93.1
Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access.
- affected < 20220207-13.93.1fixed 20220207-13.93.1
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
- affected < 20210525-13.90.1fixed 20210525-13.90.1
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
- affected < 20210525-13.90.1fixed 20210525-13.90.1
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20210525-13.90.1fixed 20210525-13.90.1
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20210525-13.90.1fixed 20210525-13.90.1
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20201027-13.76.1fixed 20201027-13.76.1
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20201118-13.81.1fixed 20201118-13.81.1
Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20201027-13.76.1fixed 20201027-13.76.1
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
- affected < 20200602-13.68.1fixed 20200602-13.68.1
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20200602-13.68.1fixed 20200602-13.68.1
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20200602-13.68.1fixed 20200602-13.68.1
Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- affected < 20191112-13.53.1fixed 20191112-13.53.1
Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.
- affected < 20191112-13.53.1fixed 20191112-13.53.1
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
- affected < 20190618-13.47.1fixed 20190618-13.47.1
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products c
- affected < 20190618-13.47.1fixed 20190618-13.47.1
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found h
- affected < 20190618-13.47.1fixed 20190618-13.47.1
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here:
Page 1 of 2