SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03670 rev. 2 - Intel® Processors Data Leakage Advisory

Information Disclosure

Source: HP, HP Product Security Response Team (PSRT)

Reported By: Intel

Intel has informed HP of a potential security vulnerability involving cleanup errors in some data cache evictions in some Intel® Processors that may allow an authenticated user to potentially enable information disclosure via local access.

INTEL-SA-00329 (in English): CVE-2020-0548, CVE-2020-0549; PSR-2020-0100

See RESOLUTION section of this document.

For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com

CVSS 3.0 Base Metrics

Intel has released microcode updates to mitigate the potential vulnerability. HP has identified the affected platforms and the corresponding SoftPaq updated versions. See the affected platforms listed below.

note:

This bulletin might be updated when new information and/or SoftPaqs are available. Sign up for HP Subscriptions to be notified and receive:

• Product support eAlerts
• Driver updates
• Security bulletin updates

HP recommends keeping your system up to date with the latest firmware and software.

Under investigation: System under investigation for impact, or Softpaq under investigation for feasibility/availability.

Not available: Softpaq not available due to technical or logistical constraints.