The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1933-1 advisory.

    Updated to Intel CPU Microcode 20210608 release.

    - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom     processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)         See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

    - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel     vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of     the root (host) (INTEL-SA-00464 bsc#1179836)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

    - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to     changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

      - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-     SA-00442 bsc#1179839)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html

    Other fixes:

    - Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
    - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec     Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-     update.html) for details.
    - Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-     update.html?wapkw=processor+spec+update+e5) for details.
    - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification     Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-     specification-update.html) for details.
    - Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec     Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-     update.html) for details.
    - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families     Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-     update.html) for details.
    - Update for functional issues. Refer to [6th Gen Intel Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
    - Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for     details.
    - Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-     update.html) for details.

    - New platforms:

    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products     |:---------------|:---------|:------------|:---------|:---------|:---------     | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2     | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3     | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3     | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB     | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB     | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile     | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile     | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile     | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron     J6412/J6413/N6210/N6211, Atom x6000E     | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron     N4500/N4505/N5100/N5105     | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11

    - Updated platforms:

    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products     |:---------------|:---------|:------------|:---------|:---------|:---------     | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3     | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3     | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile     | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile     | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx     | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable     | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable     | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx     | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2     | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2     | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3     | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48,     Pentium D1507/08/09/17/19     | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87     | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53     | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom     x5/7-E39xx     | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx     | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5     | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series     | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx     | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120     | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile     | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology     | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile     | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile     | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile     | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile     | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile     | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile     | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile     | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6     | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E     | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8     | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9     | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile     | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile     | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10     | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10     | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile     | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2300 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20210525 release

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1933-1 advisory.

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2299 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20210525 release

    * Do not use grep -q in a pipe in check_caveats.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2021:2308 advisory.

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:3028 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

  - hw: vt-d related privilege escalation (CVE-2020-24489)

  - hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  - hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3028-1 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

  - hw: vt-d related privilege escalation (CVE-2020-24489)

  - hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  - hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3176 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fixes:

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    Bug Fix(es):

    * [rhel-8.1.0.z] Re-enable 06-5e-03 (SKL-H/S, CPUID 0x506e3) latest microcode updates (BZ#1972327)

    * [rhel-8.1.0.z] Re-enable 06-8c-01 (TGL-UP3/UP4, CPUID 0x806c1)  latest microcode updates (BZ#1972331)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
150731	SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2021:1933-1)	Nessus	SuSE Local Security Checks	2021/6/12	2026/6/25	high
150829	RHEL 7 : microcode_ctl (RHSA-2021:2300)	Nessus	Red Hat Local Security Checks	2021/6/16	2024/11/8	high
151708	openSUSE 15 Security Update : ucode-intel (openSUSE-SU-2021:1933-1)	Nessus	SuSE Local Security Checks	2021/7/16	2021/7/16	high
154545	NewStart CGSL CORE 5.04 / MAIN 5.04 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0113)	Nessus	NewStart CGSL Local Security Checks	2021/10/27	2021/10/27	high
155785	RHEL 6 : microcode_ctl (RHSA-2021:2299)	Nessus	Red Hat Local Security Checks	2021/12/2	2024/11/7	high
157747	Rocky Linux 8 : microcode_ctl (RLSA-2021:2308)	Nessus	Rocky Linux Local Security Checks	2022/2/9	2023/11/7	high
152360	CentOS 7 : microcode_ctl (CESA-2021:3028)	Nessus	CentOS Local Security Checks	2021/8/9	2021/8/9	high
152364	Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:3028)	Nessus	Scientific Linux Local Security Checks	2021/8/9	2021/8/9	high
152627	RHEL 8 : microcode_ctl (RHSA-2021:3176)	Nessus	Red Hat Local Security Checks	2021/8/17	2024/11/7	high
160753	NewStart CGSL CORE 5.04 / MAIN 5.04 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0011)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	high
160807	NewStart CGSL MAIN 6.02 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0060)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

high

high