The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An information disclosure vulnerability exists when certain central processing units (CPU) speculatively     access memory. An attacker who successfully exploited the vulnerability could read privileged data across     trust boundaries. To exploit this vulnerability, an attacker would have to log on to an affected system     and run a specially crafted application. The vulnerability would not allow an attacker to elevate user     rights directly, but it could be used to obtain information that could be used to try to compromise the     affected system further. On January 3, 2018, Microsoft released an advisory and security updates related     to a newly-discovered class of hardware vulnerabilities (known as Spectre) involving speculative execution     side channels that affect AMD, ARM, and Intel CPUs to varying degrees. This vulnerability, released on     August 6, 2019, is a variant of the Spectre Variant 1 speculative execution side channel vulnerability and     has been assigned CVE-2019-1125. Microsoft released a security update on July 9, 2019 that addresses the     vulnerability through a software change that mitigates how the CPU speculatively accesses memory. Note     that this vulnerability does not require a microcode update from your device OEM. (CVE-2019-1125)

  - An information disclosure vulnerability exists when certain central processing units (CPU) speculatively     access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from     CVE-2019-1071, CVE-2019-1073. (CVE-2019-1125)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2019-1125

medium Nessus Plugin ID 222517

Version 1.8