CVE-2020-0549
Published: January 28, 2020Last modified: November 8, 2023
Description
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | HIGH |
| Integrity impact | NONE |
| Availability impact | NONE |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | intel-ucode | Not affected (20230808-r0) |
| Stream | intel-ucode | Not affected (20230808-r0) |
References
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10318
- https://lists.debian.org/debian-lts-announce/2020/06/msg00019.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DT2VKDMQ3I37NBNJ256A2EXR7OJHXXKZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5OUM24ZC43G4IDT3JUCIHJTSDXJSK6Y/
- https://security.netapp.com/advisory/ntap-20200210-0004/
- https://usn.ubuntu.com/4385-1/
- https://www.debian.org/security/2020/dsa-4701
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00329.html