The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-4934 advisory.

    This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security     vulnerabilities which could result in privilege escalation in combination with VT-d and various side     channel attacks. For the stable distribution (buster), these problems have been fixed in version     3.20210608.2~deb10u1. Note that there are two reported regressions; for some CoffeeLake CPUs this update     may break iwlwifi (https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/56) and some     for Skylake R0/D0 CPUs on systems using a very outdated firmware/BIOS, the system may hang on boot:
    (https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/31) If you are affected by     those issues, you can recover by disabling microcode loading on boot (as documented in README.Debian, also     available online at https://salsa.debian.org/hmh/intel-microcode/-/blob/master/debian/README.Debian) We     recommend that you upgrade your intel-microcode packages. For the detailed security status of intel-     microcode please refer to its security tracker page at: https://security-tracker.debian.org/tracker/intel-     microcode

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0876-1 advisory.

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2308 advisory.

    [4:20210216-1.20210525.0.1]
    - add support for UEK6 kernels
    - remove no longer appropriate caveats for 06-2d-07 and 06-55-04

    [4:20210216-1.20210525.1]
    - Update Intel CPU microcode to microcode-20210525 release, addresses       CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513       (#1962663, #1962713, #1962733, #1962679):
      - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
      - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
      - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
      - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
      - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)         at revision 0xb00000f;
      - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)         at revision 0xb00000f;
      - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
      - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
      - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
      - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
      - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
      - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
      - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in         intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up         to 0xb00003e;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up         to 0x2006b06;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
      - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in         intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up         to 0xea;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up         to 0xea;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up         to 0xea;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up         to 0xea;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xde up to 0xea;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up         to 0xea;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up         to 0xea;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up         to 0xea;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up         to 0xea;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up         to 0xea;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x44 up to 0x46;
      - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up         to 0x19;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159         up to 0x100015b;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006         up to 0x4003102;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5003006 up to 0x5003102;
      - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e         up to 0x7002302;
      - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision         0x7000019 up to 0x700001b;
      - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017         up to 0xf000019;
      - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision         0xe00000f up to 0xe000012;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up         to 0x44;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up         to 0x20;
      - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up         to 0x34;
      - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up         to 0x36;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up         to 0x1a;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0         up to 0xa6;
      - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up         to 0x2a;
      - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up         to 0xea;
      - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0         up to 0xea;
      - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0         up to 0xec;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0         up to 0xe8;
      - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision         0xe0 up to 0xea.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2307 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20210525 release

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1933-1 advisory.

    Updated to Intel CPU Microcode 20210608 release.

    - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom     processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)         See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

    - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel     vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of     the root (host) (INTEL-SA-00464 bsc#1179836)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

    - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to     changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

      - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-     SA-00442 bsc#1179839)

        See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html

    Other fixes:

    - Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
    - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family     Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec     Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-     update.html) for details.
    - Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
    - Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-     update.html?wapkw=processor+spec+update+e5) for details.
    - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification     Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-     specification-update.html) for details.
    - Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec     Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-     update.html) for details.
    - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families     Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-     update.html) for details.
    - Update for functional issues. Refer to [6th Gen Intel Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
    - Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for     details.
    - Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification     Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-     update.html) for details.

    - New platforms:

    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products     |:---------------|:---------|:------------|:---------|:---------|:---------     | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2     | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3     | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3     | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB     | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB     | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile     | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile     | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile     | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron     J6412/J6413/N6210/N6211, Atom x6000E     | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron     N4500/N4505/N5100/N5105     | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11

    - Updated platforms:

    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products     |:---------------|:---------|:------------|:---------|:---------|:---------     | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3     | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3     | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile     | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile     | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx     | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable     | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable     | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx     | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2     | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2     | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3     | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48,     Pentium D1507/08/09/17/19     | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87     | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53     | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom     x5/7-E39xx     | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx     | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5     | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series     | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx     | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120     | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile     | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology     | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile     | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile     | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile     | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile     | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile     | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile     | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile     | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6     | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E     | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8     | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9     | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile     | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile     | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10     | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10     | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile     | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2300 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20210525 release

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1933-1 advisory.

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2299 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20210525 release

    * Do not use grep -q in a pipe in check_caveats.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2021:2308 advisory.

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1922:07 advisory.

    * hw: vt-d related privilege escalation (CVE-2020-24489)
      * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)
      * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)
      * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)     Bug Fix(es) and Enhancement(s):
      * Update Intel CPU microcode to microcode-20210525 release
      * Do not use grep -q in a pipe in check_caveats.
    CVE-2020-24489
    ** RESERVED ** This candidate has been reserved by an organization or individual     that will use it when announcing a new security problem. When the candidate has     been publicized, the details for this candidate will be provided.
    CVE-2020-24511
    ** RESERVED ** This candidate has been reserved by an organization or individual     that will use it when announcing a new security problem. When the candidate has     been publicized, the details for this candidate will be provided.
    CVE-2020-24512
    ** RESERVED ** This candidate has been reserved by an organization or individual     that will use it when announcing a new security problem. When the candidate has     been publicized, the details for this candidate will be provided.
    CVE-2020-24513
    ** RESERVED ** This candidate has been reserved by an organization or individual     that will use it when announcing a new security problem. When the candidate has     been publicized, the details for this candidate will be provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2200:09 advisory.

    * hw: vt-d related privilege escalation (CVE-2020-24489)
      * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)
      * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)
      * hw: information disclosure on some Intel Atom processors (CVE-2020-24513)     Bug Fix(es) and Enhancement(s):
      * Update Intel CPU microcode to microcode-20210525 release     CVE-2020-24489     Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access.
    CVE-2020-24511     Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access.
    CVE-2020-24512     Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access.
    CVE-2020-24513     Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
151037	Debian DSA-4934-1 : intel-microcode - security update	Nessus	Debian Local Security Checks	2021/6/28	2025/1/24	high
151073	openSUSE 15 Security Update : ucode-intel (openSUSE-SU-2021:0876-1)	Nessus	SuSE Local Security Checks	2021/6/28	2022/1/21	high
151217	Oracle Linux 8 : microcode_ctl (ELSA-2021-2308)	Nessus	Oracle Linux Local Security Checks	2021/7/1	2024/10/23	high
160807	NewStart CGSL MAIN 6.02 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0060)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	high
150391	RHEL 8 : microcode_ctl (RHSA-2021:2307)	Nessus	Red Hat Local Security Checks	2021/6/9	2024/11/7	high
150731	SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2021:1933-1)	Nessus	SuSE Local Security Checks	2021/6/12	2026/6/25	high
150829	RHEL 7 : microcode_ctl (RHSA-2021:2300)	Nessus	Red Hat Local Security Checks	2021/6/16	2024/11/8	high
151708	openSUSE 15 Security Update : ucode-intel (openSUSE-SU-2021:1933-1)	Nessus	SuSE Local Security Checks	2021/7/16	2021/7/16	high
154545	NewStart CGSL CORE 5.04 / MAIN 5.04 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0113)	Nessus	NewStart CGSL Local Security Checks	2021/10/27	2021/10/27	high
155785	RHEL 6 : microcode_ctl (RHSA-2021:2299)	Nessus	Red Hat Local Security Checks	2021/12/2	2024/11/7	high
157747	Rocky Linux 8 : microcode_ctl (RLSA-2021:2308)	Nessus	Rocky Linux Local Security Checks	2022/2/9	2023/11/7	high
293882	MiracleLinux 4 : microcode_ctl-1.17-33.32.0.3.AXS4 (AXSA:2021-1922:07)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
294506	MiracleLinux 8 : microcode_ctl-20210216-1.20210525.1.el8 (AXSA:2021-2200:09)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high