Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html

According to the version of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Load value injection in some Intel(R) Processors     utilizing speculative execution may allow an     authenticated user to potentially enable information     disclosure via a side channel with local     access.(CVE-2020-0551)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Binutils is a collection of binary utilities, including     ar (for creating, modifying and extracting from     archives), as (a family of GNU assemblers), gprof (for     displaying call graph profile data), ld (the GNU     linker), nm (for listing symbols from object files),     objcopy (for copying and translating object files),     objdump (for displaying information from object files),     ranlib (for generating an index for the contents of an     archive), readelf (for displaying detailed information     about binary files), size (for listing the section     sizes of an object or archive file), strings (for     listing printable strings from files), strip (for     discarding symbols), and addr2line (for converting     addresses to file and line).Security Fix(es):Load value     injection in some Intel(R) Processors utilizing     speculative execution may allow an authenticated user     to potentially enable information disclosure via a side     channel with local access.(CVE-2020-0551)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Load value injection in some Intel(R) Processors     utilizing speculative execution may allow an     authenticated user to potentially enable information     disclosure via a side channel with local     access.(CVE-2020-0551)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
150229	EulerOS 2.0 SP9 : binutils (EulerOS-SA-2021-1940)	Nessus	Huawei Local Security Checks	medium
150167	EulerOS 2.0 SP9 : binutils (EulerOS-SA-2021-1919)	Nessus	Huawei Local Security Checks	medium
148601	EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2021-1732)	Nessus	Huawei Local Security Checks	medium
148578	EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2021-1760)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2020-0551

medium

Tenable Plugins

medium

medium

medium

medium