CVE-2019-11135
published 2019-11-14CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via…
medium6.5CVSS 3.1
AVLACLPRLUINSCCHINAN
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
Affected
97 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | intel-microcode | < intel-microcode 3.20191112.1 (bookworm) | intel-microcode 3.20191112.1 (bookworm) |
| debian | linux | < intel-microcode 3.20191112.1 (bookworm) | intel-microcode 3.20191112.1 (bookworm) |
| debian | linux | — | — |
| debian | xen | < intel-microcode 3.20191112.1 (bookworm) | intel-microcode 3.20191112.1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| hp | apollo_2000_firmware | < 2.20 | 2.20 |
| hp | apollo_4200_firmware | < 2.20 | 2.20 |
| hp | proliant_bl460c_firmware | < 2.20 | 2.20 |
| hp | proliant_dl120_firmware | < 2.20 | 2.20 |
| hp | proliant_dl160_firmware | < 2.20 | 2.20 |
| hp | proliant_dl180_firmware | < 2.20 | 2.20 |
| hp | proliant_dl20_firmware | < 2.10 | 2.10 |
| hp | proliant_dl360_firmware | < 2.20 | 2.20 |
| hp | proliant_dl380_firmware | < 2.20 | 2.20 |
| hp | proliant_dl560_firmware | < 2.20 | 2.20 |
| hp | proliant_dl580_firmware | < 2.20 | 2.20 |
| hp | proliant_e910_firmware | < 2.20 | 2.20 |
| hp | proliant_ml110_firmware | < 2.20 | 2.20 |
| hp | proliant_ml30_firmware | < 2.10 | 2.10 |
| hp | proliant_ml350_firmware | < 2.20 | 2.20 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
osv6.5MEDIUM