PT-2020-1360 · Intel+7 · Intel Processors+7

Alyssa Milburn + 6 · Published 2020-01-27 · Updated 2024-06-15 · CVE-2020-0548

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Processors (affected versions not specified)

Description The issue is related to cleanup errors in some Intel(R) processors, which may allow an authenticated user to potentially enable information disclosure via local access. This is connected to a leak in the store buffer of results from reading vector registers, which are modified during the execution of vector instructions. An attacker could exploit this to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Improper Resource Release

Weakness Enumeration

CWE-452

CWE-200

CWE-404

Related Identifiers

ALT-PU-2020-2350

ALT-PU-2021-3199

ALT-PU-2023-8026

BDU:2020-00306

CESA-2020_2431

CESA-2020_2432

CESA-2020_2433

CESA-2021_3027

CESA-2021_3028

CVE-2020-0548

DLA-2248-1

DSA-4701-1

MGASA-2020-0298

OPENSUSE-SU-2020:0791-1

OPENSUSE-SU-2020_0791-1

OPENSUSE-SU-2024:11370-1

OPENSUSE-SU-2024:11371-1

OPENSUSE-SU-2024:11478-1

RHSA-2020:2431

RHSA-2020:2432

RHSA-2020:2433

RHSA-2020:2677

RHSA-2020:2679

RHSA-2020:2680

RHSA-2020:2706

RHSA-2020:2707

RHSA-2020:2757

RHSA-2020:2758

RHSA-2020:2771

RHSA-2020:2842

RHSA-2020_2431

RHSA-2020_2432

RHSA-2020_2433

RHSA-2021:3027

RHSA-2021:3028

RHSA-2021:3029

RHSA-2021:3176

RHSA-2021:3255

RHSA-2021:3317

RHSA-2021:3322

RHSA-2021:3323

RHSA-2021:3364

RHSA-2021_3027

RHSA-2021_3028

RLSA-2021:3027

SUSE-FU-2022:4496-1

SUSE-SU-2020:14394-1

SUSE-SU-2020:1589-1

SUSE-SU-2020:1595-1

SUSE-SU-2020:1600-1

SUSE-SU-2020:1601-1

SUSE-SU-2020_1589-1

SUSE-SU-2020_1595-1

SUSE-SU-2020_1600-1

SUSE-SU-2020_1601-1

USN-4385-1

USN-4385-2

Affected Products

Alt Linux

Centos

Intel Processors

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 166

• https://osv.dev/vulnerability/DEBIAN-CVE-2020-0548 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:3027 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0298 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00329.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0791-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1601-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/T5OUM24ZC43G4IDT3JUCIHJTSDXJSK6Y · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-FU-2022:4496-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:14394-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1589-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4385-2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DT2VKDMQ3I37NBNJ256A2EXR7OJHXXKZ · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-0543 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11478-1 · Vendor Advisory