CVE-2019-11139

Published: 14/11/2019 Updated: 07/11/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 6 | Impact Score: 4 | Exploitability Score: 1.5

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

USN-4182-2 provided updated Intel Processor Microcode. A regression exists that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 8.0
opensuse leap 15.0
opensuse leap 15.1
intel xeon 8153 firmware -
intel xeon 8156 firmware -
intel xeon 8158 firmware -
intel xeon 8160 firmware -
intel xeon 8160f firmware -
intel xeon 8160m firmware -
intel xeon 8160t firmware -
intel xeon 8164 firmware -
intel xeon 8168 firmware -
intel xeon 8170 firmware -
intel xeon 8170m firmware -
intel xeon 8176 firmware -
intel xeon 8176f firmware -
intel xeon 8176m firmware -
intel xeon 8180 firmware -
intel xeon 8180m firmware -
intel xeon 5115 firmware -
intel xeon 5118 firmware -
intel xeon 5119t firmware -
intel xeon 5120 firmware -
intel xeon 5120t firmware -
intel xeon 5122 firmware -
intel xeon 6126 firmware -
intel xeon 6126f firmware -
intel xeon 6126t firmware -
intel xeon 6128 firmware -
intel xeon 6130 firmware -
intel xeon 6130f firmware -
intel xeon 6130t firmware -
intel xeon 6132 firmware -
intel xeon 6134 firmware -
intel xeon 6134m firmware -
intel xeon 6136 firmware -
intel xeon 6138 firmware -
intel xeon 6138f firmware -
intel xeon 6138t firmware -
intel xeon 6140 firmware -
intel xeon 6140m firmware -
intel xeon 6142 firmware -
intel xeon 6142f firmware -
intel xeon 6144 firmware -
intel xeon 6146 firmware -
intel xeon 6148 firmware -
intel xeon 6148f firmware -
intel xeon 6150 firmware -
intel xeon 6152 firmware -
intel xeon 6154 firmware -
intel xeon 4108 firmware -
intel xeon 4109t firmware -
intel xeon 4110 firmware -
intel xeon 4112 firmware -
intel xeon 4114 firmware -
intel xeon 4114t firmware -
intel xeon 4116 firmware -
intel xeon 4116t firmware -
intel xeon 3104 firmware -
intel xeon 3106 firmware -

This update ships updated CPU microcode for some types of Intel CPUs In particular it provides mitigations for the TAA (TSX Asynchronous Abort) vulnerability For affected CPUs, to fully mitigate the vulnerability it is also necessary to update the Linux kernel packages as released in DSA 4564-1 For the oldstable distribution (stretch), these pro ...

Several security issues were fixed in Intel Microcode ...

USN-4182-2 introduced a regression in the Intel Microcode for some Skylake processors ...

USN-4182-1 introduced a regression in the Intel Microcode for some Skylake processors ...

Several security issues were fixed in Intel Microcode ...

This security update is only applicable to EC2 Bare Metal instance types using Intel processors Intel has released microcode updates for certain Intel CPUs After installing the updated microcode_ctl package, the microcode will be automatically activated on next boot Improper conditions check in the voltage modulation interface for some Intel ...

It was discovered that certain Intel Xeon processors did not properly restrict access to a voltage modulation interface A local privileged attacker could use this to cause a denial of service (system crash) ...

Multiple security vulnerabilities have been identified by Intel Intel is releasing updates for BIOS, Voltage Modulation, Intel Processor Graphics, Intel SGX, Intel SGX and Intel TXT, Intel SGX and Intel Processor Graphics, Intel Trusted Execution Technology (TXT), Intel System Management Mode (SMM), Intel CPU Local Privilege Escalation, TSX Asynch ...

CWE-754 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03969en_us https://seclists.org/bugtraq/2019/Dec/28 https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html https://support.f5.com/csp/article/K42433061?utm_source=f5support&%3Butm_medium=RSS https://nvd.nist.gov https://www.debian.org/security/2019/dsa-4565 https://usn.ubuntu.com/4182-1/https://usn.ubuntu.com/4182-4/

CVE-2019-11139

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect