Detections
Analytics
Alpine: intel-ucode: security update to 20240312-r0
medium Tenable Self-Hosted Container Security Plugin ID 408400
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using
Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via
local access. (CVE-2023-22655)
- Information exposure through microarchitectural state after transient execution from some register files
for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information
disclosure via local access. (CVE-2023-28746)
- Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow
an authorized user to potentially enable information disclosure via local access. (CVE-2023-38575)
- Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an
unauthenticated user to potentially enable denial of service via network access. (CVE-2023-39368)
- Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R)
SGX may allow a privileged user to potentially enable information disclosure via local access.
(CVE-2023-43490)
See Also
https://security.alpinelinux.org/vuln/CVE-2023-22655
https://security.alpinelinux.org/vuln/CVE-2023-28746
https://security.alpinelinux.org/vuln/CVE-2023-38575
Plugin Details
Severity: Medium
ID: 408400
Version: Revision 1.12
Type: Local
Published: 5/16/2024
Updated: 8/21/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 94.59
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 3.4
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:N
CVSS Score Source: CVE-2023-38575
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2023-28746
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 3/12/2024
Reference Information
CVE: CVE-2023-22655, CVE-2023-28746, CVE-2023-38575, CVE-2023-39368, CVE-2023-43490