CVE-2018-12127: falha de média gravidade em Intel Corporation Central Processing Units…
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.6epss 1.5%
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Intel Corporation · Central Processing Units (CPUs)CVEs relacionadas — Intel Corporation Central Processing Units…
No mesmo produto, das mais perigosas para as menos.
Referências
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.htmlhttp://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.htmlhttps://access.redhat.com/errata/RHSA-2019:1455https://access.redhat.com/errata/RHSA-2019:2553https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdfhttps://kc.mcafee.com/corporate/index?page=content&id=SB10292https://lists.debian.org/debian-lts-announce/2019/06/msg00018.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/https://seclists.org/bugtraq/2019/Jun/28