CVE-2020-4788LOW
Description
IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.
References
http://www.openwall.com/lists/oss-security/2020/11/20/3
http://www.openwall.com/lists/oss-security/2020/11/23/1
Details
Source: MITRE
Published: 2020-11-20
Updated: 2020-12-03
Type: NVD-CWE-noinfo
Risk Information
CVSS v2.0
Base Score: 1.9
Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
Impact Score: 2.9
Exploitability Score: 3.4
Severity: LOW
CVSS v3.0
Base Score: 4.7
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 1
Severity: MEDIUM
Vulnerable Software
Configuration 1
AND
OR
cpe:2.3:o:ibm:aix:7.1.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:7.1.5:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:7.2.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:7.2.3:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:7.2.4:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:7.2.5:*:*:*:*:*:*:*
cpe:2.3:o:ibm:vios:3.1.0:*:*:*:*:*:*:*
OR
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 148041 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-1684) | Nessus | Huawei Local Security Checks | high |
| 147588 | EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2021-1386) | Nessus | Huawei Local Security Checks | high |
| 146511 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0452-1) | Nessus | SuSE Local Security Checks | high |
| 146474 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0438-1) | Nessus | SuSE Local Security Checks | high |
| 146470 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0434-1) | Nessus | SuSE Local Security Checks | high |
| 146282 | openSUSE Security Update : RT kernel (openSUSE-2021-242) | Nessus | SuSE Local Security Checks | high |
| 145287 | openSUSE Security Update : the Linux Kernel (openSUSE-2021-75) | Nessus | SuSE Local Security Checks | high |
| 145120 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0133-1) | Nessus | SuSE Local Security Checks | high |
| 145018 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:0118-1) | Nessus | SuSE Local Security Checks | high |
| 144914 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0098-1) | Nessus | SuSE Local Security Checks | high |
| 144752 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4681-1) | Nessus | Ubuntu Local Security Checks | high |
| 144313 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-2260) | Nessus | SuSE Local Security Checks | high |
| 144259 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3798-1) | Nessus | SuSE Local Security Checks | high |
| 144168 | EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-2514) | Nessus | Huawei Local Security Checks | high |
| 144143 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3764-1) | Nessus | SuSE Local Security Checks | high |
| 144101 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:3748-1) | Nessus | SuSE Local Security Checks | high |
| 143542 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-2193) | Nessus | SuSE Local Security Checks | high |
| 143523 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-2161) | Nessus | SuSE Local Security Checks | high |
| 143445 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4660-1) | Nessus | Ubuntu Local Security Checks | high |
| 143433 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4657-1) | Nessus | Ubuntu Local Security Checks | high |
| 143431 | Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4658-1) | Nessus | Ubuntu Local Security Checks | high |
| 143429 | Ubuntu 20.10 : Linux kernel vulnerabilities (USN-4659-1) | Nessus | Ubuntu Local Security Checks | high |
| 143261 | Fedora 32 : kernel (2020-4700a73bd5) | Nessus | Fedora Local Security Checks | low |
| 143258 | Fedora 33 : kernel (2020-8c15928d23) | Nessus | Fedora Local Security Checks | low |
| 143147 | AIX 7.2 TL 4 : power9 (IJ28227) | Nessus | AIX Local Security Checks | low |
| 143142 | AIX 7.1 TL 5 : power9 (IJ28229) | Nessus | AIX Local Security Checks | low |
| 143136 | AIX 7.2 TL 5 : power9 (IJ28226) | Nessus | AIX Local Security Checks | low |
| 143131 | AIX 7.2 TL 3 : power9 (IJ28228) | Nessus | AIX Local Security Checks | low |