The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5084 advisory.

    - Update Intel CPU microcode to microcode-20201027 release, addresses       CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698       (#1893243, #1893238):
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode (in microcode.dat)         at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in         microcode.dat) at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode (in microcode.dat)         at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode (in microcode.dat)         at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat)         at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode (in         microcode.dat) at revision 0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         microcode-06-4e-03.dat) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         microcode-06-55-04.dat) from revision 0x2006906 up to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         microcode-06-5e-03.dat) from revision 0xdc up to 0xe2;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         (in microcode.dat) from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode (in microcode.dat)         from revision 0x1000157 up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode (in microcode.dat)         from revision 0x4002f01 up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode (in         microcode.dat) from revision 0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode (in microcode.dat) from         revision 0x38 up to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode (in microcode.dat)         from revision 0x16 up to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode (in microcode.dat)         from revision 0x16 up to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in microcode.dat)         from revision 0x78 up to 0xa0;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in microcode.dat)         from revision 0xd6 up to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         microcode.dat) from revision 0xd6 up to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in microcode.dat)         from revision 0xd6 up to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in microcode.dat)         from revision 0xd6 up to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         microcode.dat) from revision 0xd6 up to 0xde;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode (in microcode.dat)         from revision 0xca up to 0xe0.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5083 advisory.

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4628-3 advisory.

    USN-4628-1 provided updated Intel Processor Microcode for various processor types.

    This update provides the corresponding updates for some additional processor types.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14546-1 advisory.

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-3027 advisory.

    [4:20210216-1.20210608.0.1]
    - add support for UEK6 kernels
    - enable early update for 06-4f-01
    - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
    - enable early and late load on RHCK

    [4:20210216-1.20210608.1]
    - Update Intel CPU microcode to microcode-20210608 release:
      - Fixes in releasenote.md file.

    [4:20210216-1.20210525.2]
    - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,       intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,       and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
    - Enable 06-8c-01 microcode update by default (#1972328).
    - Enable 06-5e-03 microcode update by default (#1972325).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3176 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fixes:

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    Bug Fix(es):

    * [rhel-8.1.0.z] Re-enable 06-5e-03 (SKL-H/S, CPUID 0x506e3) latest microcode updates (BZ#1972327)

    * [rhel-8.1.0.z] Re-enable 06-8c-01 (TGL-UP3/UP4, CPUID 0x806c1)  latest microcode updates (BZ#1972331)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3317 advisory.

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3322 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5085 advisory.

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5084 advisory.

    Security Fix(es):

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20201027 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.

    * Add README file to the documentation directory.

    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.

    * Add SUMMARY.intel-ucode file containing metadata information from       the microcode file headers.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ucode-intel fixes the following issues :

  - Updated Intel CPU Microcode to 20201118 official     release. (bsc#1178971)

  - Removed TGL/06-8c-01/80 due to functional issues with     some OEM platforms.

  - Updated Intel CPU Microcode to 20201110 official     release.

  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)     (bsc#1170446)

  - CVE-2020-8698: Fixed Fast Store Forward Predictor     INTEL-SA-00381 (bsc#1173594)

  - CVE-2020-8696: Vector Register Sampling Active     INTEL-SA-00381 (bsc#1173592)

  - Release notes :

  - Security updates for     [INTEL-SA-00381](https://www.intel.com/content/www/us/en     /security-center/advisory/intel-sa-00381.html).

  - Security updates for     [INTEL-SA-00389](https://www.intel.com/content/www/us/en     /security-center/advisory/intel-sa-00389.html).

  - Update for functional issues. Refer to [Second     Generation Intel&reg; Xeon&reg; Processor Scalable     Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338848     ) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; Processor Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537     ) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; Processor E5 v3 Product Family Specification     Update](https://www.intel.com/content/www/us/en/processo     rs/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec     +update+e5) for details.

  - Update for functional issues. Refer to [10th Gen     Intel&reg; Core&trade; Processor Families Specification     Update](https://www.intel.com/content/www/us/en/products     /docs/processors/core/10th-gen-core-families-specificati     on-update.html) for details.

  - Update for functional issues. Refer to [8th and 9th Gen     Intel&reg; Core&trade; Processor Family Spec     Update](https://www.intel.com/content/www/us/en/products     /docs/processors/core/8th-gen-core-spec-update.html) for     details.

  - Update for functional issues. Refer to [7th Gen and 8th     Gen (U Quad-Core) Intel&reg; Processor Families     Specification     Update](https://www.intel.com/content/www/us/en/processo     rs/core/7th-gen-core-family-spec-update.html) for     details.

  - Update for functional issues. Refer to [6th Gen     Intel&reg; Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689     ) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; E3-1200 v6 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/processo     rs/xeon/xeon-e3-1200v6-spec-update.html) for details.

  - Update for functional issues. Refer to [Intel&reg;
    Xeon&reg; E-2100 and E-2200 Processor Family     Specification     Update](https://www.intel.com/content/www/us/en/products     /docs/processors/xeon/xeon-e-2100-specification-update.h     tml) for details.

    ### New Platforms | Processor | Stepping | F-M-S/PI |     Old Ver | New Ver | Products     |:---------------|:---------|:------------|:---------|:-
    --------|:--------- | CPX-SP | A1 | 06-55-0b/bf | |     0700001e | Xeon Scalable Gen3 | LKF | B2/B3 |     06-8a-01/10 | | 00000028 | Core w/Hybrid Technology |     TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile     | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10     Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core     Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core     Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 |     Core Gen10 Mobile ### Updated Platforms | Processor |     Stepping | F-M-S/PI | Old Ver | New Ver | Products     |:---------------|:---------|:------------|:---------|:-
    --------|:--------- | HSX-E/EP | Cx/M1 | 06-3f-02/6f |     00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 |     SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core     Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 |     000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97     | 01000157 | 01000159 | Xeon Scalable | SKX-SP |     H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon     Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 |     02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf |     04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 |     06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 |     APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium     N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 |     06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx |     SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 |     Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 |     00000016 | 00000018 | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 |     00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 |     06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile |     KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core     Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 |     000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 |     000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 |     06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile |     CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core     Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 |     000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 |     06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3     v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de     | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 |     06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S     | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 |     CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core     Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca |     000000e0 | Core Gen10 Mobile

This update was imported from the SUSE:SLE-15:Update update project.

The remote NewStart CGSL host, running version MAIN 4.06, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th     Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families;
    Intel(R) Xeon(R) E-2100 & E-2200 Processor Families with Intel(R) Processor Graphics may allow a     privileged user to potentially enable information disclosure via local access. (CVE-2019-0117)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-8698)

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
142961	Oracle Linux 6 : microcode_ctl (ELSA-2020-5084)	Nessus	Oracle Linux Local Security Checks	11/17/2020	10/22/2024	medium
144442	Virtuozzo 7 : microcode_ctl (VZLSA-2020-5083)	Nessus	Virtuozzo Local Security Checks	12/18/2020	2/1/2024	medium
160865	NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0046)	Nessus	NewStart CGSL Local Security Checks	5/10/2022	5/10/2022	high
149521	Ubuntu 18.04 LTS / 20.04 LTS : Intel Microcode vulnerabilities (USN-4628-3)	Nessus	Ubuntu Local Security Checks	5/17/2021	10/29/2024	medium
150603	SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2020:14546-1)	Nessus	SuSE Local Security Checks	6/10/2021	6/10/2021	medium
152365	Oracle Linux 8 : microcode_ctl (ELSA-2021-3027)	Nessus	Oracle Linux Local Security Checks	8/9/2021	10/22/2024	high
152627	RHEL 8 : microcode_ctl (RHSA-2021:3176)	Nessus	Red Hat Local Security Checks	8/17/2021	11/7/2024	high
152926	RHEL 7 : microcode_ctl (RHSA-2021:3317)	Nessus	Red Hat Local Security Checks	8/31/2021	11/7/2024	high
152955	RHEL 7 : microcode_ctl (RHSA-2021:3322)	Nessus	Red Hat Local Security Checks	9/1/2021	11/8/2024	high
145932	CentOS 8 : microcode_ctl (CESA-2020:5085)	Nessus	CentOS Local Security Checks	2/1/2021	3/23/2021	medium
142716	RHEL 6 : microcode_ctl (RHSA-2020:5084)	Nessus	Red Hat Local Security Checks	11/11/2020	11/7/2024	medium
143297	openSUSE Security Update : ucode-intel (openSUSE-2020-2075)	Nessus	SuSE Local Security Checks	11/30/2020	2/8/2024	medium
147405	NewStart CGSL MAIN 4.06 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0001)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	3/11/2021	medium

Detections

Analytics

Plugins Search

medium

medium

high

medium

medium

high

high

high

high

medium

medium

medium

medium