PT-2021-3470 · Intel+8 · Intel Atom Processors+8

Published 2021-06-08 · Updated 2024-06-15 · CVE-2020-24513

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Atom Processors (affected versions not specified)

Description The issue is related to a domain-bypass transient execution vulnerability in some Intel Atom Processors. This may allow an authenticated user to potentially enable information disclosure via local access. The vulnerability is also associated with a lack of protection for service data, which could allow a remote attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2021-1996

ALT-PU-2021-3199

ALT-PU-2023-8026

BDU:2021-03384

CESA-2021_2308

CVE-2020-24513

DLA-2718-1

DSA-4934-1

MGASA-2021-0256

OESA-2022-1773

OPENSUSE-SU-2021:0876-1

OPENSUSE-SU-2021:1933-1

OPENSUSE-SU-2021_0876-1

OPENSUSE-SU-2021_1933-1

OPENSUSE-SU-2024:11478-1

RHSA-2021:2299

RHSA-2021:2300

RHSA-2021:2301

RHSA-2021:2302

RHSA-2021:2303

RHSA-2021:2304

RHSA-2021:2305

RHSA-2021:2306

RHSA-2021:2307

RHSA-2021:2308

RHSA-2021_2299

RHSA-2021_2305

RHSA-2021_2308

RLSA-2021:2308

SUSE-SU-2021:14758-1

SUSE-SU-2021:1929-1

SUSE-SU-2021:1930-1

SUSE-SU-2021:1931-1

SUSE-SU-2021:1932-1

SUSE-SU-2021:1933-1

SUSE-SU-2021_14758-1

USN-4985-1

Affected Products

Alt Linux

Astra Linux

Centos

Intel Atom Processors

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 81

• https://osv.dev/vulnerability/DSA-4934-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:2308 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-24513 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:1933-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-24513 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-24489 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1773 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1930-1 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-24513 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4985-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-2305.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-24511 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1931-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1929-1 · Vendor Advisory