The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3322 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2706 advisory.

    Security Fix(es):

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

    Bug Fix(es):

    * Update Intel CPU microcode to microcode-20200609 release:
      - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f         up to 0x621;
      - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718         up to 0x71a;
      - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
      - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e         up to 0x2f;
      - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25         up to 0x26;
      - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
      - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21         up to 0x22;
      - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6         up to 0xdc;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151         up to 0x1000157;
      - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode         (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065         up to 0x2006906;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c         up to 0x4002f01;
      - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c         up to 0x5002f01;
      - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6         up to 0xdc;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46         up to 0x78;
      - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode         from revision 0xca up to 0xd6;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision         0xca up to 0xd6;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
      - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.
    * Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision       0xdc, use 0xd6 by default.
    * Enable 06-2d-07 (SNB-E/EN/EP) caveat by default.
    * Enable 06-55-04 (SKL-SP/X/W) caveat by default.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2020-0548, CVE-2020-0549, CVE-2020-0543

----

Security fixes for CVE-2020-0548, CVE-2020-0549, CVE-2020-0543

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2433 advisory.

    The microcode_ctl packages provide microcode updates for Intel and AMD processors.

    Security Fix(es):

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20200602 release, addresses:
      - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
      - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e         up to 0x2f;
      - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25         up to 0x26;
      - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
      - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21         up to 0x22;
      - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6         up to 0xdc;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151         up to 0x1000157;
      - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode         (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065         up to 0x2006906;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c         up to 0x4002f01;
      - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c         up to 0x5002f01;
      - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6         up to 0xdc;
      - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode         from revision 0xca up to 0xd6;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision         0xca up to 0xd6;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
      - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca         up to 0xd6;
      - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.

    * Update Intel CPU microcode to microcode-20200520 release:
      - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f         up to 0x621;
      - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718         up to 0x71a;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46         up to 0x78.

    (BZ#1839193)

    * Narrow down SKL-SP/W/X blacklist to exclude Server/FPGA/Fabric segment       models. (BZ#1835555)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2432 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS)     (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
152955	RHEL 7 : microcode_ctl (RHSA-2021:3322)	Nessus	Red Hat Local Security Checks	9/1/2021	11/8/2024	high
137751	RHEL 6 : microcode_ctl (RHSA-2020:2706)	Nessus	Red Hat Local Security Checks	6/23/2020	11/8/2024	medium
137842	Fedora 31 : 2:microcode_ctl (2020-11ddbfbdf0)	Nessus	Fedora Local Security Checks	6/26/2020	3/5/2024	medium
137273	RHEL 6 : microcode_ctl (RHSA-2020:2433)	Nessus	Red Hat Local Security Checks	6/9/2020	11/7/2024	medium
137337	CentOS 7 : microcode_ctl (CESA-2020:2432)	Nessus	CentOS Local Security Checks	6/11/2020	3/7/2024	medium

Detections

Analytics

Plugins Search

high

medium

medium

medium

medium