Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-33120 (GCVE-0-2021-33120)
Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 16:49- information disclosure or cause denial of service
- CWE-125 - Out-of-bounds Read
| URL | Tags |
|---|---|
| https://www.intel.com/content/www/us/en/security-… | x_refsource_MISC |
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Intel Atom(R) Processors |
Affected:
See references
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T23:42:19.859Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2021-33120",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-04-23T13:21:22.594244Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-05T16:49:25.748Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Intel Atom(R) Processors",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "See references"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": " information disclosure or cause denial of service ",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-09T22:04:42.000Z",
"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"shortName": "intel"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secure@intel.com",
"ID": "CVE-2021-33120",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Intel Atom(R) Processors",
"version": {
"version_data": [
{
"version_value": "See references"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": " information disclosure or cause denial of service "
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html",
"refsource": "MISC",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"assignerShortName": "intel",
"cveId": "CVE-2021-33120",
"datePublished": "2022-02-09T22:04:42.000Z",
"dateReserved": "2021-05-18T00:00:00.000Z",
"dateUpdated": "2025-05-05T16:49:25.748Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2021-33120",
"date": "2026-06-04",
"epss": "0.00686",
"percentile": "0.72089"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-33120\",\"sourceIdentifier\":\"secure@intel.com\",\"published\":\"2022-02-09T23:15:15.627\",\"lastModified\":\"2025-05-05T17:17:14.277\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.\"},{\"lang\":\"es\",\"value\":\"Una lectura fuera de l\u00edmites bajo una condici\u00f3n micro arquitect\u00f3nica compleja en el subsistema de memoria para algunos procesadores Intel Atom(R) puede permitir a un usuario autenticado habilitar potencialmente una divulgaci\u00f3n de informaci\u00f3n o causar una denegaci\u00f3n de servicio por medio del acceso a la red\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":2.5},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":2.5}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:N/A:P\",\"baseScore\":5.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_p5942b_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"495F0985-B84C-466E-A239-36A1930E82D2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_p5942b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D860FEC-BA79-4FEE-A79C-88AA857358E4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_p5931b_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94AC79B7-2FE6-44A7-BF7F-2698FE2D45E6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_p5931b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31E2104F-0CE3-4B9D-88B3-35D982C36562\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_p5962b_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"516D1139-6858-44E4-8031-62CF96CAE998\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_p5962b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2CEF8A6-2445-4B63-822D-81F6AC708D62\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_p5921b_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B290BC76-AB87-469E-9F9F-C0ADAA95DEE7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_p5921b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6D6CEE1-25DF-43C5-AEBB-49585B64236A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:xeon_d1700_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"141FEA0B-C28D-44D6-8108-B3270DA4B6D2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:xeon_d1700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D94D7B29-565F-4E62-A958-27FFDDD7399E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:xeon_d2700_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78553957-B9D3-4111-B805-6ED8994A5F3F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:xeon_d2700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"594DDCAB-96D4-4999-824E-7597B971B6DC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:core_i5-l16g7_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E03DB0E4-C488-4CE1-B951-6333C313EF05\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i5-l16g7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A4FD69F-FF53-43F4-97C8-40867DB67958\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:core_i3-l13g4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10E9EB5B-77FF-462A-A314-6848A6E55918\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:core_i3-l13g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39FD6F9C-FEEA-4D52-8745-6477B50AFB0C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:pentium_j6425_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C1F254A-E8D9-4AE7-9F66-22604E09FFB6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:pentium_j6425:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D97C7A90-D8C6-4901-BCA1-E40DA173AA9D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:pentium_n6415_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0456F580-EC62-4AA4-8D82-CDDFDD04E41D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:pentium_n6415:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"638FA431-71EA-4668-AFF2-989A4994ED12\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:celeron_j6413_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"101B5BBD-BCA6-42D9-BCC7-5D3BF124BCB9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:celeron_j6413:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7A8BF58-1D33-484A-951C-808443912BE8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:celeron_n6211_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F52F496A-E2E2-48F6-B6CD-99F83A2A211C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:celeron_n6211:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"406E9139-BCFF-406B-A856-57896D27B752\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_x6413e_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CDAE2B6-8347-4FEE-B98A-F8F44CEA753A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_x6413e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B3348F4-8E2B-42BE-9F3A-48DFF5CE0047\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_x6425re_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72EAB882-C018-44BC-A186-41D0A023544B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_x6425re:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7313975C-41A5-4657-8758-1C16F947BE4C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_x6427fe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7EBA7169-5D8D-409D-8E87-1727001F824B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_x6427fe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FBE4406-9979-4723-833C-176F051E6389\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_x6212re_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"501D3EF9-1404-4B2B-B152-5EE2E24FDCFE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_x6212re:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F85599DD-3F80-4EB0-9753-D24EDD8D76CC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_x6200fe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1DED3AE-C09C-43F7-B5EF-1C454B8A8711\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_x6200fe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89231773-9D9B-434A-A6A3-8527C4F6FEBB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_x6211e_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC7111D1-0DA1-4C16-9727-35931D50C746\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_x6211e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A85EA674-2537-4323-AEDA-FA356489E7DE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:atom_x6425e_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE90CE4B-AF89-4C28-B47B-6964CB87FD92\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:atom_x6425e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F068F4F-8CCD-4218-871C-BEABEB0DAB55\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:pentium_silver_n6005_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50F37CD3-FE1F-4361-B6E3-070315F0DA83\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:pentium_silver_n6005:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42841FAC-A6EC-44F3-9FCD-B4549A783014\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:pentium_silver_n6000_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CE6B67B-1CD5-4454-AFEF-2965C1798F40\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:pentium_silver_n6000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31282347-8DCB-4B37-A853-DFD9D5AF31EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:celeron_n4505_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA10274E-8C1C-496C-9D2D-85CFC63746E4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:celeron_n4505:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE7B5E21-2796-4578-998F-B03E26277DE7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:celeron_n4500_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"708CB83F-5155-4079-9887-490D81EDDEB1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:celeron_n4500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B54D15DF-53EA-4611-932A-EDB8279F582A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:celeron_n5105_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"432FEF5E-6CEE-4B71-A836-CA2BA63E692E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:celeron_n5105:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA455AC5-8434-4B59-BE89-E82CDACD2AEC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:intel:celeron_n5100_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EED20A13-3E8D-4734-82E1-BF811C12C294\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:intel:celeron_n5100:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96D6F5D3-3559-47AD-8201-C9D34417DC09\"}]}]}],\"references\":[{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html\",\"source\":\"secure@intel.com\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T23:42:19.859Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.4, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-33120\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-23T13:21:22.594244Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"CWE-125 Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-05T13:14:02.472Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"Intel Atom(R) Processors\", \"versions\": [{\"status\": \"affected\", \"version\": \"See references\"}]}], \"references\": [{\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \" information disclosure or cause denial of service \"}]}], \"providerMetadata\": {\"orgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"shortName\": \"intel\", \"dateUpdated\": \"2022-02-09T22:04:42.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"See references\"}]}, \"product_name\": \"Intel Atom(R) Processors\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html\", \"name\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \" information disclosure or cause denial of service \"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2021-33120\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"secure@intel.com\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2021-33120\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-05T16:49:25.748Z\", \"dateReserved\": \"2021-05-18T00:00:00.000Z\", \"assignerOrgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"datePublished\": \"2022-02-09T22:04:42.000Z\", \"assignerShortName\": \"intel\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
SUSE-SU-2022:0575-1
Vulnerability from csaf_suse - Published: 2022-02-25 16:00 - Updated: 2022-02-25 16:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ucode-intel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "HPE-Helion-OpenStack-8-2022-575,SUSE-2022-575,SUSE-OpenStack-Cloud-8-2022-575,SUSE-OpenStack-Cloud-9-2022-575,SUSE-OpenStack-Cloud-Crowbar-8-2022-575,SUSE-OpenStack-Cloud-Crowbar-9-2022-575,SUSE-SLE-SAP-12-SP3-2022-575,SUSE-SLE-SAP-12-SP4-2022-575,SUSE-SLE-SERVER-12-SP2-BCL-2022-575,SUSE-SLE-SERVER-12-SP3-2022-575,SUSE-SLE-SERVER-12-SP3-BCL-2022-575,SUSE-SLE-SERVER-12-SP4-LTSS-2022-575",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_0575-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2022:0575-1",
"url": "https://www.suse.com/support/update/announcement/2022/suse-su-20220575-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2022:0575-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010308.html"
},
{
"category": "self",
"summary": "SUSE Bug 1192615",
"url": "https://bugzilla.suse.com/1192615"
},
{
"category": "self",
"summary": "SUSE Bug 1195779",
"url": "https://bugzilla.suse.com/1195779"
},
{
"category": "self",
"summary": "SUSE Bug 1195780",
"url": "https://bugzilla.suse.com/1195780"
},
{
"category": "self",
"summary": "SUSE Bug 1195781",
"url": "https://bugzilla.suse.com/1195781"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0127 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0145 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0146 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-33120 page",
"url": "https://www.suse.com/security/cve/CVE-2021-33120/"
}
],
"title": "Security update for ucode-intel",
"tracking": {
"current_release_date": "2022-02-25T16:00:30Z",
"generator": {
"date": "2022-02-25T16:00:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2022:0575-1",
"initial_release_date": "2022-02-25T16:00:30Z",
"revision_history": [
{
"date": "2022-02-25T16:00:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20220207-13.93.1.i586",
"product": {
"name": "ucode-intel-20220207-13.93.1.i586",
"product_id": "ucode-intel-20220207-13.93.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20220207-13.93.1.x86_64",
"product": {
"name": "ucode-intel-20220207-13.93.1.x86_64",
"product_id": "ucode-intel-20220207-13.93.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE Helion OpenStack 8",
"product": {
"name": "HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:hpe-helion-openstack:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 8",
"product": {
"name": "SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 9",
"product": {
"name": "SUSE OpenStack Cloud 9",
"product_id": "SUSE OpenStack Cloud 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:9"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 8",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 9",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 9",
"product_id": "SUSE OpenStack Cloud Crowbar 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:9"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE OpenStack Cloud 9",
"product_id": "SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
"product_id": "SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-13.93.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64"
},
"product_reference": "ucode-intel-20220207-13.93.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-0127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0127"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0127",
"url": "https://www.suse.com/security/cve/CVE-2021-0127"
},
{
"category": "external",
"summary": "SUSE Bug 1195779 for CVE-2021-0127",
"url": "https://bugzilla.suse.com/1195779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:30Z",
"details": "moderate"
}
],
"title": "CVE-2021-0127"
},
{
"cve": "CVE-2021-0145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0145"
}
],
"notes": [
{
"category": "general",
"text": "Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0145",
"url": "https://www.suse.com/security/cve/CVE-2021-0145"
},
{
"category": "external",
"summary": "SUSE Bug 1195780 for CVE-2021-0145",
"url": "https://bugzilla.suse.com/1195780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:30Z",
"details": "moderate"
}
],
"title": "CVE-2021-0145"
},
{
"cve": "CVE-2021-0146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0146"
}
],
"notes": [
{
"category": "general",
"text": "Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0146",
"url": "https://www.suse.com/security/cve/CVE-2021-0146"
},
{
"category": "external",
"summary": "SUSE Bug 1192615 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1192615"
},
{
"category": "external",
"summary": "SUSE Bug 1193500 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1193500"
},
{
"category": "external",
"summary": "SUSE Bug 1200661 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1200661"
},
{
"category": "external",
"summary": "SUSE Bug 1200663 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1200663"
},
{
"category": "external",
"summary": "SUSE Bug 1205062 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1205062"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:30Z",
"details": "important"
}
],
"title": "CVE-2021-0146"
},
{
"cve": "CVE-2021-33120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-33120"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-33120",
"url": "https://www.suse.com/security/cve/CVE-2021-33120"
},
{
"category": "external",
"summary": "SUSE Bug 1195781 for CVE-2021-33120",
"url": "https://bugzilla.suse.com/1195781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4-LTSS:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-intel-20220207-13.93.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud 9:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:ucode-intel-20220207-13.93.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ucode-intel-20220207-13.93.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:30Z",
"details": "moderate"
}
],
"title": "CVE-2021-33120"
}
]
}
SUSE-SU-2022:0576-1
Vulnerability from csaf_suse - Published: 2022-02-25 16:00 - Updated: 2022-02-25 16:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ucode-intel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ucode-intel fixes the following issues:\n\nUpdated to Intel CPU Microcode 20220207 release.\n\n- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)\n- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)\n- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)\n- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)\n\n- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)\n- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2022-576,SUSE-SLE-SERVER-12-SP5-2022-576",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_0576-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2022:0576-1",
"url": "https://www.suse.com/support/update/announcement/2022/suse-su-20220576-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2022:0576-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010309.html"
},
{
"category": "self",
"summary": "SUSE Bug 1192615",
"url": "https://bugzilla.suse.com/1192615"
},
{
"category": "self",
"summary": "SUSE Bug 1195779",
"url": "https://bugzilla.suse.com/1195779"
},
{
"category": "self",
"summary": "SUSE Bug 1195780",
"url": "https://bugzilla.suse.com/1195780"
},
{
"category": "self",
"summary": "SUSE Bug 1195781",
"url": "https://bugzilla.suse.com/1195781"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0127 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0145 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0146 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-33120 page",
"url": "https://www.suse.com/security/cve/CVE-2021-33120/"
}
],
"title": "Security update for ucode-intel",
"tracking": {
"current_release_date": "2022-02-25T16:00:37Z",
"generator": {
"date": "2022-02-25T16:00:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2022:0576-1",
"initial_release_date": "2022-02-25T16:00:37Z",
"revision_history": [
{
"date": "2022-02-25T16:00:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20220207-3.38.1.i586",
"product": {
"name": "ucode-intel-20220207-3.38.1.i586",
"product_id": "ucode-intel-20220207-3.38.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20220207-3.38.1.x86_64",
"product": {
"name": "ucode-intel-20220207-3.38.1.x86_64",
"product_id": "ucode-intel-20220207-3.38.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-3.38.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
},
"product_reference": "ucode-intel-20220207-3.38.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20220207-3.38.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
},
"product_reference": "ucode-intel-20220207-3.38.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-0127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0127"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0127",
"url": "https://www.suse.com/security/cve/CVE-2021-0127"
},
{
"category": "external",
"summary": "SUSE Bug 1195779 for CVE-2021-0127",
"url": "https://bugzilla.suse.com/1195779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:37Z",
"details": "moderate"
}
],
"title": "CVE-2021-0127"
},
{
"cve": "CVE-2021-0145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0145"
}
],
"notes": [
{
"category": "general",
"text": "Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0145",
"url": "https://www.suse.com/security/cve/CVE-2021-0145"
},
{
"category": "external",
"summary": "SUSE Bug 1195780 for CVE-2021-0145",
"url": "https://bugzilla.suse.com/1195780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:37Z",
"details": "moderate"
}
],
"title": "CVE-2021-0145"
},
{
"cve": "CVE-2021-0146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0146"
}
],
"notes": [
{
"category": "general",
"text": "Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0146",
"url": "https://www.suse.com/security/cve/CVE-2021-0146"
},
{
"category": "external",
"summary": "SUSE Bug 1192615 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1192615"
},
{
"category": "external",
"summary": "SUSE Bug 1193500 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1193500"
},
{
"category": "external",
"summary": "SUSE Bug 1200661 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1200661"
},
{
"category": "external",
"summary": "SUSE Bug 1200663 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1200663"
},
{
"category": "external",
"summary": "SUSE Bug 1205062 for CVE-2021-0146",
"url": "https://bugzilla.suse.com/1205062"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:37Z",
"details": "important"
}
],
"title": "CVE-2021-0146"
},
{
"cve": "CVE-2021-33120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-33120"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-33120",
"url": "https://www.suse.com/security/cve/CVE-2021-33120"
},
{
"category": "external",
"summary": "SUSE Bug 1195781 for CVE-2021-33120",
"url": "https://bugzilla.suse.com/1195781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20220207-3.38.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20220207-3.38.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-02-25T16:00:37Z",
"details": "moderate"
}
],
"title": "CVE-2021-33120"
}
]
}
WID-SEC-W-2022-0391
Vulnerability from csaf_certbund - Published: 2022-02-08 23:00 - Updated: 2024-02-18 23:00In Intel Prozessoren existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Steuerungsflussverwaltung, einer unsachgemäßen Initialisierung gemeinsam genutzter Ressourcen und eines Lesevorgangs außerhalb der Grenzen unter komplexen mikroarchitektonischen Bedingungen im Speichersubsystem. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Lenovo BIOS
Lenovo
|
cpe:/h:lenovo:bios:-
|
— | |
|
Lenovo Computer
Lenovo
|
cpe:/o:lenovo:lenovo_computer:-
|
— | |
|
HPE Synergy
HPE
|
cpe:/h:hpe:synergy:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
IBM QRadar SIEM
IBM
|
cpe:/a:ibm:qradar_siem:-
|
— | |
|
NetApp Data ONTAP
NetApp
|
cpe:/a:netapp:data_ontap:-
|
— | |
|
Intel Prozessor
Intel
|
cpe:/h:intel:intel_prozessor:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Citrix Systems Hypervisor
Citrix Systems
|
cpe:/o:citrix:hypervisor:-
|
— | |
|
HPE ProLiant
HPE
|
cpe:/h:hp:proliant:-
|
— |
In Intel Prozessoren existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Steuerungsflussverwaltung, einer unsachgemäßen Initialisierung gemeinsam genutzter Ressourcen und eines Lesevorgangs außerhalb der Grenzen unter komplexen mikroarchitektonischen Bedingungen im Speichersubsystem. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Lenovo BIOS
Lenovo
|
cpe:/h:lenovo:bios:-
|
— | |
|
Lenovo Computer
Lenovo
|
cpe:/o:lenovo:lenovo_computer:-
|
— | |
|
HPE Synergy
HPE
|
cpe:/h:hpe:synergy:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
IBM QRadar SIEM
IBM
|
cpe:/a:ibm:qradar_siem:-
|
— | |
|
NetApp Data ONTAP
NetApp
|
cpe:/a:netapp:data_ontap:-
|
— | |
|
Intel Prozessor
Intel
|
cpe:/h:intel:intel_prozessor:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Citrix Systems Hypervisor
Citrix Systems
|
cpe:/o:citrix:hypervisor:-
|
— | |
|
HPE ProLiant
HPE
|
cpe:/h:hp:proliant:-
|
— |
In Intel Prozessoren existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Steuerungsflussverwaltung, einer unsachgemäßen Initialisierung gemeinsam genutzter Ressourcen und eines Lesevorgangs außerhalb der Grenzen unter komplexen mikroarchitektonischen Bedingungen im Speichersubsystem. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Lenovo BIOS
Lenovo
|
cpe:/h:lenovo:bios:-
|
— | |
|
Lenovo Computer
Lenovo
|
cpe:/o:lenovo:lenovo_computer:-
|
— | |
|
HPE Synergy
HPE
|
cpe:/h:hpe:synergy:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
IBM QRadar SIEM
IBM
|
cpe:/a:ibm:qradar_siem:-
|
— | |
|
NetApp Data ONTAP
NetApp
|
cpe:/a:netapp:data_ontap:-
|
— | |
|
Intel Prozessor
Intel
|
cpe:/h:intel:intel_prozessor:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Citrix Systems Hypervisor
Citrix Systems
|
cpe:/o:citrix:hypervisor:-
|
— | |
|
HPE ProLiant
HPE
|
cpe:/h:hp:proliant:-
|
— |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.\r\nProLiant ist eine Serverfamilie von Hewlett Packard Enterprise.\r\nSynergy ist eine kombinierbare Blade-Infrastruktur, die Workloads in einer Hybrid Cloud-Umgebung unterst\u00fctzt.\r\nLenovo ist ein Hersteller u. a. von Computern.\r\nDas BIOS ist die Firmware bei IBM PC kompatiblen Computern.\r\nCitrix Hypervisor ist eine Plattform f\u00fcr Desktop-, Server- und Cloud-Virtualisierungsinfrastrukturen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Prozessoren ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren und vertrauliche Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- NetApp Appliance\n- BIOS/Firmware\n- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-0391 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0391.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-0391 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0391"
},
{
"category": "external",
"summary": "Lenovo Security Advisory vom 2022-02-08",
"url": "https://support.lenovo.com/us/en/product_security/LEN-77639"
},
{
"category": "external",
"summary": "Citrix Security Advisory vom 2022-02-08",
"url": "https://support.citrix.com/article/CTX337526"
},
{
"category": "external",
"summary": "Intel Security Advisory vom 2022-02-08",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html"
},
{
"category": "external",
"summary": "Intel Security Advisory vom 2022-02-08",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00561.html"
},
{
"category": "external",
"summary": "Intel Security Advisory vom 2022-02-08",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"
},
{
"category": "external",
"summary": "HPE Security Advisory vom 2022-02-08",
"url": "https://support.hpe.com/hpesc/public/docDisplay?elq_mid=17739\u0026elq_cid=67018031\u0026docId=hpesbhf04244en_us"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20220210-0008 vom 2022-02-14",
"url": "https://security.netapp.com/advisory/ntap-20220210-0008/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:0502-1 vom 2022-02-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010264.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:0541-1 vom 2022-02-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:0575-1 vom 2022-02-25",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010308.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:0574-1 vom 2022-02-25",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010310.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:0576-1 vom 2022-02-25",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010309.html"
},
{
"category": "external",
"summary": "HPE Security Bulletin",
"url": "https://support.hpe.com/hpesc/public/docDisplay?elq_mid=17739\u0026elq_cid=67018031\u0026docId=hpesbhf04244en_us"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2022-1762 vom 2022-03-09",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1762.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5486-1 vom 2022-06-20",
"url": "https://ubuntu.com/security/notices/USN-5486-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5535-1 vom 2022-07-28",
"url": "https://ubuntu.com/security/notices/USN-5535-1"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6845359 vom 2022-12-06",
"url": "https://www.ibm.com/support/pages/node/6845359"
},
{
"category": "external",
"summary": "Gentoo Linux Security Advisory GLSA-202402-22 vom 2024-02-19",
"url": "https://security.gentoo.org/glsa/202402-22"
}
],
"source_lang": "en-US",
"title": "Intel Prozessoren: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-02-18T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:28:51.363+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2022-0391",
"initial_release_date": "2022-02-08T23:00:00.000+00:00",
"revision_history": [
{
"date": "2022-02-08T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2022-02-13T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von NetApp aufgenommen"
},
{
"date": "2022-02-20T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-02-21T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-02-27T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-03-06T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2022-03-08T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-06-19T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2022-07-28T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2022-12-05T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2024-02-18T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Gentoo aufgenommen"
}
],
"status": "final",
"version": "11"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Citrix Systems Hypervisor",
"product": {
"name": "Citrix Systems Hypervisor",
"product_id": "T016872",
"product_identification_helper": {
"cpe": "cpe:/o:citrix:hypervisor:-"
}
}
}
],
"category": "vendor",
"name": "Citrix Systems"
},
{
"branches": [
{
"category": "product_name",
"name": "Gentoo Linux",
"product": {
"name": "Gentoo Linux",
"product_id": "T012167",
"product_identification_helper": {
"cpe": "cpe:/o:gentoo:linux:-"
}
}
}
],
"category": "vendor",
"name": "Gentoo"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE ProLiant",
"product": {
"name": "HPE ProLiant",
"product_id": "T009310",
"product_identification_helper": {
"cpe": "cpe:/h:hp:proliant:-"
}
}
},
{
"category": "product_name",
"name": "HPE Synergy",
"product": {
"name": "HPE Synergy",
"product_id": "T019820",
"product_identification_helper": {
"cpe": "cpe:/h:hpe:synergy:-"
}
}
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM QRadar SIEM",
"product": {
"name": "IBM QRadar SIEM",
"product_id": "T021415",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Intel Prozessor",
"product": {
"name": "Intel Prozessor",
"product_id": "T011586",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:-"
}
}
}
],
"category": "vendor",
"name": "Intel"
},
{
"branches": [
{
"category": "product_name",
"name": "Lenovo BIOS",
"product": {
"name": "Lenovo BIOS",
"product_id": "T005651",
"product_identification_helper": {
"cpe": "cpe:/h:lenovo:bios:-"
}
}
},
{
"category": "product_name",
"name": "Lenovo Computer",
"product": {
"name": "Lenovo Computer",
"product_id": "T006520",
"product_identification_helper": {
"cpe": "cpe:/o:lenovo:lenovo_computer:-"
}
}
}
],
"category": "vendor",
"name": "Lenovo"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp Data ONTAP",
"product": {
"name": "NetApp Data ONTAP",
"product_id": "7654",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:data_ontap:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-0127",
"notes": [
{
"category": "description",
"text": "In Intel Prozessoren existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Steuerungsflussverwaltung, einer unsachgem\u00e4\u00dfen Initialisierung gemeinsam genutzter Ressourcen und eines Lesevorgangs au\u00dferhalb der Grenzen unter komplexen mikroarchitektonischen Bedingungen im Speichersubsystem. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen."
}
],
"product_status": {
"known_affected": [
"T005651",
"T006520",
"T019820",
"T002207",
"T000126",
"T021415",
"7654",
"T011586",
"398363",
"T012167",
"T016872",
"T009310"
]
},
"release_date": "2022-02-08T23:00:00.000+00:00",
"title": "CVE-2021-0127"
},
{
"cve": "CVE-2021-0145",
"notes": [
{
"category": "description",
"text": "In Intel Prozessoren existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Steuerungsflussverwaltung, einer unsachgem\u00e4\u00dfen Initialisierung gemeinsam genutzter Ressourcen und eines Lesevorgangs au\u00dferhalb der Grenzen unter komplexen mikroarchitektonischen Bedingungen im Speichersubsystem. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen."
}
],
"product_status": {
"known_affected": [
"T005651",
"T006520",
"T019820",
"T002207",
"T000126",
"T021415",
"7654",
"T011586",
"398363",
"T012167",
"T016872",
"T009310"
]
},
"release_date": "2022-02-08T23:00:00.000+00:00",
"title": "CVE-2021-0145"
},
{
"cve": "CVE-2021-33120",
"notes": [
{
"category": "description",
"text": "In Intel Prozessoren existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Steuerungsflussverwaltung, einer unsachgem\u00e4\u00dfen Initialisierung gemeinsam genutzter Ressourcen und eines Lesevorgangs au\u00dferhalb der Grenzen unter komplexen mikroarchitektonischen Bedingungen im Speichersubsystem. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen."
}
],
"product_status": {
"known_affected": [
"T005651",
"T006520",
"T019820",
"T002207",
"T000126",
"T021415",
"7654",
"T011586",
"398363",
"T012167",
"T016872",
"T009310"
]
},
"release_date": "2022-02-08T23:00:00.000+00:00",
"title": "CVE-2021-33120"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.