Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6286-1
HistoryAug 14, 2023 - 12:00 a.m.

Intel Microcode vulnerabilities

2023-08-1400:00:00
ubuntu.com
41
ubuntu
intel microcode
vulnerabilities
speculative execution
intel cpus
xeon processors
sgx
tdx
3rd generation
scalable processors
cve-2022-40982
cve-2022-41804
cve-2023-23908

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON

Releases

  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • intel-microcode - Processor microcode for Intel CPUs

Details

Daniel Moghimi discovered that some Intel® Processors did not properly clear
microarchitectural state after speculative execution of various instructions. A
local unprivileged user could use this to obtain to sensitive
information. (CVE-2022-40982)

It was discovered that some Intel® Xeon® Processors did not properly
restrict error injection for Intel® SGX or Intel® TDX. A local privileged
user could use this to further escalate their privileges. (CVE-2022-41804)

It was discovered that some 3rd Generation Intel® Xeon® Scalable processors
did not properly restrict access in some situations. A local privileged attacker
could use this to obtain sensitive information. (CVE-2023-23908)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchintel-microcode< 3.20230808.0ubuntu1UNKNOWN
Ubuntu22.04noarchintel-microcode< 3.20230808.0ubuntu0.22.04.1UNKNOWN
Ubuntu20.04noarchintel-microcode< 3.20230808.0ubuntu0.20.04.1UNKNOWN
Ubuntu18.04noarchintel-microcode< 3.20230808.0ubuntu0.18.04.1+esm1UNKNOWN
Ubuntu18.04noarchintel-microcode< 3.20230214.0ubuntu0.18.04.1UNKNOWN
Ubuntu16.04noarchintel-microcode< 3.20230808.0ubuntu0.16.04.1+esm1UNKNOWN
Ubuntu16.04noarchintel-microcode< 3.20210216.0ubuntu0.16.04.1UNKNOWN

Related

osv 22
cloudfoundry 1
rocky 2
nessus 52
debian 5
openvas 40
mageia 3
fedora 4
redos 1
redhatcve 3
nvd 3
cvelist 3
intel 2
debiancve 3
ubuntucve 3
veracode 3
alpinelinux 3
prion 3
cve 3
f5 2
talosblog 1
oraclelinux 8
ics 1
vulnrichment 1
cloudlinux 1
amazon 1
xen 1
chrome 1
redhat 4
citrix 1
thn 2
trellix 2
ubuntu 12
hp 1
centos 1
osv
osv
intel-microcode - security update
2023-08-11 00:00:00
intel-microcode vulnerabilities
2023-08-14 01:35:24
intel-microcode - security update
2023-08-22 00:00:00
cloudfoundry
cloudfoundry
USN-6286-1: Intel Microcode vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
rocky
rocky
microcode_ctl bug fix and enhancement update
2023-09-19 12:08:46
microcode_ctl bug fix and enhancement update
2023-09-19 12:10:01
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2023:3383-1)
2023-08-24 00:00:00
SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2023:3359-1)
2023-08-19 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Intel Microcode vulnerabilities (USN-6286-1)
2023-08-14 00:00:00
debian
debian
[SECURITY] [DLA 3537-1] intel-microcode security update
2023-08-22 01:09:42
[SECURITY] [DSA 5474-1] intel-microcode security update
2023-08-11 07:56:56
[SECURITY] [DLA 3524-1] linux security update
2023-08-10 19:41:46
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:3382-1)
2023-08-24 00:00:00
openSUSE: Security Advisory for ucode (SUSE-SU-2023:3383-1)
2024-03-04 00:00:00
Debian: Security Advisory (DSA-5474-1)
2023-08-14 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
fedora
fedora
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.1.fc38
2023-08-16 01:22:33
[SECURITY] Fedora 37 Update: microcode_ctl-2.1-53.2.fc37
2023-08-18 00:42:26
[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38
2023-08-16 01:22:32
redos
redos
ROS-20240902-01
2024-09-02 00:00:00
redhatcve
redhatcve
CVE-2023-23908
2023-08-22 17:50:09
CVE-2022-41804
2023-08-22 17:49:29
CVE-2022-40982
2023-08-08 17:20:33
nvd
nvd
CVE-2023-23908
2023-08-11 03:15:18
CVE-2022-41804
2023-08-11 03:15:15
CVE-2022-40982
2023-08-11 03:15:14
cvelist
cvelist
CVE-2022-41804
2023-08-11 02:37:08
CVE-2023-23908
2023-08-11 02:37:07
CVE-2022-40982
2023-08-11 02:37:05
intel
intel
2023.3 IPU - Intel® Xeon® Processor Advisory
2023-08-08 00:00:00
2023.3 IPU - Intel® Xeon® Scalable Processors Advisory
2023-08-08 00:00:00
debiancve
debiancve
CVE-2022-41804
2023-08-11 03:15:15
CVE-2023-23908
2023-08-11 03:15:18
CVE-2022-40982
2023-08-11 03:15:14
ubuntucve
ubuntucve
CVE-2022-41804
2023-08-08 00:00:00
CVE-2023-23908
2023-08-08 00:00:00
CVE-2022-40982
2023-08-08 00:00:00
veracode
veracode
Error Injection
2023-08-10 06:01:36
Information Disclosure
2023-08-09 23:25:18
Information Disclosure
2023-08-10 23:12:56
alpinelinux
alpinelinux
CVE-2022-41804
2023-08-11 03:15:15
CVE-2023-23908
2023-08-11 03:15:18
CVE-2022-40982
2023-08-11 03:15:14
prion
prion
Design/Logic Flaw
2023-08-11 03:15:00
Improper access control
2023-08-11 03:15:00
Information disclosure
2023-08-11 03:15:00
cve
cve
CVE-2022-41804
2023-08-11 03:15:15
CVE-2023-23908
2023-08-11 03:15:18
CVE-2022-40982
2023-08-11 03:15:14
f5
f5
K000138966 : Intel Xeon CPU vulnerability CVE-2023-23908
2024-03-21 00:00:00
K000135795: Downfall Attacks CVE-2022-40982
2023-08-09 00:00:00
talosblog
talosblog
Recapping the top stories from Black Hat and DEF CON
2023-08-17 18:00:32
oraclelinux
oraclelinux
microcode_ctl security update
2023-08-15 00:00:00
microcode_ctl security update
2023-08-15 00:00:00
Unbreakable Enterprise kernel-container security update
2023-09-11 00:00:00
ics
ics
Siemens SIMATIC IPCs
2023-09-14 12:00:00
vulnrichment
vulnrichment
CVE-2022-40982
2023-08-11 02:37:05
cloudlinux
cloudlinux
microcode_ctl: Fix of CVE-2022-40982
2023-08-30 17:12:48
amazon
amazon
Medium: microcode_ctl
2023-08-03 18:10:00
xen
xen
x86/Intel: Gather Data Sampling
2023-08-08 15:53:00
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-08-01 00:00:00
redhat
redhat
(RHSA-2024:3319) Important: kernel security update
2024-05-23 07:23:18
(RHSA-2023:7423) Important: kernel security update
2023-11-21 14:52:31
(RHSA-2023:7424) Important: kernel-rt security update
2023-11-21 14:52:34
citrix
citrix
Citrix Hypervisor Security Bulletin for CVE-2023-20569, CVE-2023-34319 and CVE-2022-40982
2023-08-08 17:07:04
thn
thn
iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs
2023-10-26 16:49:00
Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs
2023-08-09 15:39:00
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
ubuntu
ubuntu
Linux kernel (Raspberry Pi) vulnerabilities
2023-09-06 00:00:00
Linux kernel vulnerabilities
2023-08-31 00:00:00
Linux kernel (GKE) vulnerabilities
2023-08-31 00:00:00
hp
hp
Intel 2023.3 IPU – BIOS August 2023 Security Updates
2023-08-08 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2024-01-12 19:36:38

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON
Related for USN-6286-1
osv22cloudfoundry1rocky2nessus52debian5openvas40mageia3fedora4redos1redhatcve3nvd3cvelist3intel2debiancve3ubuntucve3veracode3alpinelinux3prion3cve3f52talosblog1oraclelinux8ics1vulnrichment1cloudlinux1amazon1xen1chrome1redhat4citrix1thn2trellix2ubuntu12hp1centos1