The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3028-1 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

  - hw: vt-d related privilege escalation (CVE-2020-24489)

  - hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  - hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:3028)

high Nessus Plugin ID 152364

No changelogs found