The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5183 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20201112 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up         to 0x34;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.

    * Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.

    * Add README file to the documentation directory.

    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.

    * Add SUMMARY.intel-ucode file

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5186 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20201027 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.
    * Add README file to the documentation directory.
    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.
    * Add SUMMARY.intel-ucode file containing metadata information from       the microcode file headers.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ucode-intel fixes the following issues :

Updated Intel CPU Microcode to 20201118 official release.
(bsc#1178971)

  - Removed TGL/06-8c-01/80 due to functional issues with     some OEM platforms.

  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)     INTEL-SA-00389 (bsc#1170446)

  - CVE-2020-8698: Fixed Fast Store Forward Predictor     INTEL-SA-00381 (bsc#1173594)

  - CVE-2020-8696: Vector Register Sampling Active     INTEL-SA-00381 (bsc#1173592)

Release notes :

  - Security updates for

[INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00381.html).

  - Security updates for

[INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-cent er/ad visory/intel-sa-00389.html).

  - Update for functional issues. Refer to [Second     Generation Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor     Scalable Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/338848     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor Scalable     Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/613537     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; Processor E5 v3     Product Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 5-v3- spec-update.html?wapkw=processor+spec+update+e5) for details.

  - Update for functional issues. Refer to [10th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Families Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/10th-gen-core-families-specification-update.html) for details.

  - Update for functional issues. Refer to [8th and 9th Gen     Intel&Acirc;&reg; Core&acirc;&#132;&cent; Processor     Family Spec

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/co re/8th-gen-core-spec-update.html) for details.

  - Update for functional issues. Refer to [7th Gen and 8th     Gen (U Quad-Core) Intel&Acirc;&reg; Processor Families     Specification

Update](https://www.intel.com/content/www/us/en/processors/core/7th-ge n-cor e-family-spec-update.html) for details.

  - Update for functional issues. Refer to [6th Gen     Intel&Acirc;&reg; Processor Family Specification     Update](https://cdrdv2.intel.com/v1/dl/getContent/332689     ) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E3-1200 v6 Processor     Family Specification

Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e 3-120 0v6-spec-update.html) for details.

  - Update for functional issues. Refer to     [Intel&Acirc;&reg; Xeon&Acirc;&reg; E-2100 and E-2200     Processor Family Specification

Update](https://www.intel.com/content/www/us/en/products/docs/processo rs/xe on/xeon-e-2100-specification-update.html) for details.

### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:----
----- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5924 advisory.

    - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug:
      32040805]  {CVE-2020-8694} {CVE-2020-8695}
    - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989189]  {CVE-2020-25643}
    - geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32014099]  {CVE-2020-25645}
    - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961118]     {CVE-2020-26541}
    - btrfs: Don't submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265337]     {CVE-2019-19377}
    - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)     [Orabug: 31351023]  {CVE-2019-19448}
    - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895824]  {CVE-2020-14385}
    - nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31351789]  {CVE-2019-16089}
    - efi/x86/Add missing error handling to old_memmap 1:1 mapping code (Gen Zhang)  [Orabug: 31351924]     {CVE-2019-12380}
    - cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (Cong Wang)  [Orabug: 31779798]  {CVE-2020-14356}
    - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872862]     {CVE-2020-25211}
    - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914690]  {CVE-2020-14390}
    - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914690]  {CVE-2020-14390}
    - block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955141]  {CVE-2020-25641}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing a security update. It is, therefore, missing microcode updates to address the following vulnerabilities:

  - Microarchitectural Store Buffer Data Sampling (MSBDS) (CVE-2018-12126).

  - Microarchitectural Load Port Data Sampling (CVE-2018-12127)

  - Intel® Running Average Power Limit (RAPL) Interface (CVE-2020-8695)

Note that Nessus did not actually test for these flaws nor checked the target processor architecture but instead, has relied on the version of mcupdate_GenuineIntel.dll to be latest for supported Windows release.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5995 advisory.

    - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187748]  {CVE-2020-28974}
    - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177538]     {CVE-2020-27673}
    - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177538]     {CVE-2020-27673}
    - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177538]     {CVE-2020-27673}
    - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/events: add a new 'late EOI' evtchn framework (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673}
    - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177538]     {CVE-2020-27673}
    - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122729]     {CVE-2020-25668}
    - vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122952]  {CVE-2020-25656}     {CVE-2020-25656}
    - vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122952]  {CVE-2020-25656}
    - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin)  [Orabug: 32131175]     {CVE-2020-25704}
    - perf/core: Fix bad use of igrab() (Song Liu)  [Orabug: 32131175]  {CVE-2020-25704}
    - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32138487]  {CVE-2020-8694}     {CVE-2020-8695}
    - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864726]     {CVE-2019-19816}
    - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021288]     {CVE-2020-12352}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - powercap: restrict energy meter to root access (Kanth     Ghatraju) [Orabug: 32137965] (CVE-2020-8694)     (CVE-2020-8695)

  - Revert 'x86/efi: Initialize and display UEFI secure boot     state a bit later during init' (Eric Snowberg) [Orabug:
    31887248]

  - xfs: fix xfs_inode use after free (Wengang Wang)     [Orabug: 31932452]

  - SUNRPC: ECONNREFUSED should cause a rebind. (NeilBrown)     [Orabug: 32070175]

  - netfilter: nfnetlink: correctly validate length of batch     messages (Phil Turnbull) [Orabug: 30658635]     (CVE-2016-7917)

  - xc2028: Fix use-after-free bug properly (Takashi Iwai)     [Orabug: 30658659] (CVE-2016-7913)

  - [media] xc2028: avoid use after free (Mauro Carvalho     Chehab) [Orabug: 30658659] (CVE-2016-7913)

  - uek-rpm: Create initramfs at postinstall stage also.
    (Somasundaram Krishnasamy) [Orabug: 30821411]

  - hdlc_ppp: add range checks in ppp_cp_parse_cr (Dan     Carpenter) [Orabug: 31989190] (CVE-2020-25643)

  - tracing: Reverse the order of trace_types_lock and     event_mutex (Alan Maguire) [Orabug: 32002706]

  - ocfs2/dlm: move lock to the tail of grant queue while     doing in-place convert (xuejiufei) [Orabug: 32071234]

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:3028 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

  - hw: vt-d related privilege escalation (CVE-2020-24489)

  - hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  - hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3028-1 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

  - hw: vt-d related privilege escalation (CVE-2020-24489)

  - hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

  - hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3176 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fixes:

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512)

    Bug Fix(es):

    * [rhel-8.1.0.z] Re-enable 06-5e-03 (SKL-H/S, CPUID 0x506e3) latest microcode updates (BZ#1972327)

    * [rhel-8.1.0.z] Re-enable 06-8c-01 (TGL-UP3/UP4, CPUID 0x806c1)  latest microcode updates (BZ#1972331)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03540-1 advisory.

    - Include historical changelog data from before the docker-stable fork. The       initial changelog entry did technically provide all the necessary       information, but our CVE tracking tools do not understand how the package is       forked and so it seems that this package does not include fixes for ~12 years       of updates. So, include a copy of the original package's changelog up until       the fork point. (bsc#1250596)

    - Remove git-core recommends on SLE. Most SLE systems have       installRecommends=yes by default and thus end up installing git with Docker.
      bsc#1250508

      This feature is mostly intended for developers ('docker build git://') so       most users already have the dependency installed, and the error when git is       missing is fairly straightforward (so they can easily figure out what they       need to install).

    - Backport <https://github.com/moby/moby/pull/48517>. bsc#1247362

    - Update to docker-buildx v0.25.0. Upstream changelog:
      <https://github.com/docker/buildx/releases/tag/v0.25.0>

    - Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as       Docker does not have permission to access the host zypper credentials in this       mode (and unprivileged users cannot disable the feature using       /etc/docker/suse-secrets-enable.) bsc#1240150

    - Initial docker-stable fork, forked from Docker 24.0.7-ce release       (packaged on 2024-02-14). The original changelog is included below for       historical reference.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
143203	RHEL 7 : microcode_ctl (RHSA-2020:5183)	Nessus	Red Hat Local Security Checks	2020/11/24	2024/11/7	medium
143208	RHEL 8 : microcode_ctl (RHSA-2020:5186)	Nessus	Red Hat Local Security Checks	2020/11/24	2024/11/7	medium
143735	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3514-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	medium
142869	Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2020-5924)	Nessus	Oracle Linux Local Security Checks	2020/11/12	2026/2/9	medium
143043	Security Updates for Windows 10 / Windows Server 2016 / Windows Server 2019 (November 2020)	Nessus	Windows : Microsoft Bulletins	2020/11/18	2025/2/20	medium
144207	Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5995)	Nessus	Oracle Linux Local Security Checks	2020/12/14	2026/2/9	high
142943	OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0051)	Nessus	OracleVM Local Security Checks	2020/11/17	2020/11/25	high
152360	CentOS 7 : microcode_ctl (CESA-2021:3028)	Nessus	CentOS Local Security Checks	2021/8/9	2021/8/9	high
152364	Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:3028)	Nessus	Scientific Linux Local Security Checks	2021/8/9	2021/8/9	high
152627	RHEL 8 : microcode_ctl (RHSA-2021:3176)	Nessus	Red Hat Local Security Checks	2021/8/17	2024/11/7	high
160753	NewStart CGSL CORE 5.04 / MAIN 5.04 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0011)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	high
270099	SUSE SLES12 Security Update : docker-stable (SUSE-SU-2025:03540-1)	Nessus	SuSE Local Security Checks	2025/10/11	2025/10/11	critical

检测

插件搜索

medium

medium

medium

medium

medium

high

high

high

high

high

high

critical