The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5181 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    Bug Fix(es) and Enhancement(s):
    * Update Intel CPU microcode to microcode-20201112 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up         to 0x34;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.
    * Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.
    * Add README file to the documentation directory.
    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.
    * Add SUMMARY.intel-ucode file

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5083 advisory.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20201027 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.

    * Add README file to the documentation directory.

    * Add publicly-sourced codenames list to supply to gen_provides.sh; update the latter to handle the     somewhat different format.

    * Add SUMMARY.intel-ucode file containing metadata information from the microcode file headers.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3028 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

    * hw: Vector Register Data Sampling (CVE-2020-0548)

    * hw: L1D Cache Eviction Sampling (CVE-2020-0549)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    * hw: improper isolation of shared resources in some Intel Processors     (CVE-2020-24511)

    * hw: observable timing discrepancy in some Intel Processors     (CVE-2020-24512)

    * hw: Information disclosure issue in Intel SGX via RAPL interface     (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5190 advisory.

    The microcode_ctl packages provide microcode updates for Intel.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    Bug Fix(es) and Enhancement(s):
    * Update Intel CPU microcode to microcode-20201112 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up         to 0x34;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.
    * Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.
    * Add README file to the documentation directory.
    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.
    * Add SUMMARY.intel-ucode file

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5085 advisory.

    Security Fix(es):

    * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

    * hw: Vector Register Leakage-Active (CVE-2020-8696)

    * hw: Fast forward store predictor (CVE-2020-8698)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

    Bug Fix(es) and Enhancement(s):

    * Update Intel CPU microcode to microcode-20201027 release, addresses:
      - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
      - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
      - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
      - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
      - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
      - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision         0xe0;
      - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in         intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in         intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up         to 0x2006a08;
      - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in         intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
      - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up         to 0xe0;
      - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from         revision 0xd6 up to 0xde;
      - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up         to 0xde;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in         intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up         to 0xde;
      - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode         from revision 0x43 up to 0x44;
      - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157         up to 0x1000159;
      - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01         up to 0x4003003;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5002f01 up to 0x5003003;
      - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up         to 0x40;
      - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up         to 0x1e;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up         to 0x18;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78         up to 0xa0;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca         up to 0xe0.

    * Add README file to the documentation directory.

    * Add publicly-sourced codenames list to supply to gen_provides.sh; update       the latter to handle the somewhat different format.

    * Add SUMMARY.intel-ucode file containing metadata information from       the microcode file headers.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of microcode_ctl installed on the remote host is prior to 2.1-47. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1663 advisory.

    A flaw was found in the Intel Advanced Vector Extensions (AVX) implementation, where a local authenticated     attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX     executions. This vulnerability allows information disclosure of the AVX register state. (CVE-2020-8696)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:3027 advisory.

  - Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-0543)

  - Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable     information disclosure via local access. (CVE-2020-0548)

  - Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user     to potentially enable information disclosure via local access. (CVE-2020-0549)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511, CVE-2020-8698)

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Update to upstream 2.1-30. 20201110

  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at     revision 0x700001e;

  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at     revision 0x28;

  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at     revision 0x68;

  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at     revision 0xe0;

  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at     revision 0xe0;

  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at     revision 0xe0;

  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at     revision 0xe0;

  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2)     microcode from revision 0x43 up to 0x44;

  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode     from revision 0xd6 up to 0xe2;

  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from     revision 0x1000157 up to 0x1000159;

  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0)     microcode from revision 0x2006906 up to 0x2006a08;

  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from     revision 0x4002f01 up to 0x4003003;

  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode     from revision 0x5002f01 up to 0x5003003;

  - Update of 06-5c-09/0x03 (APL D0) microcode from revision     0x38 up to 0x40;

  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from     revision 0x16 up to 0x1e;

  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0)     microcode from revision 0xd6 up to 0xe2;

  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from     revision 0x16 up to 0x18;

  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from     revision 0x78 up to 0xa0;

  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from     revision 0xd6 up to 0xde;

  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0)     microcode from revision 0xd6 up to 0xe0;

  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from     revision 0xd6 up to 0xde;

  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0,     WHL-U V0) microcode from revision 0xd6 up to 0xde;

  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0)     microcode from revision 0xd6 up to 0xde;

  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from     revision 0xd6 up to 0xde;

  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode     from revision 0xd6 up to 0xde;

  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from     revision 0xca up to 0xe0.

  - Addresses CVE-2020-8695, CVE-2020-8696, CVE-2020-8698

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5083-1 advisory.

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable     escalation of privilege via local access. (CVE-2020-24489)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-24511)

  - Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially     enable information disclosure via local access. (CVE-2020-24512)

  - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2020-24513)

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has microcode_ctl packages installed that are affected by multiple vulnerabilities:

  - Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow     an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8696)

  - Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to     potentially enable information disclosure via local access. (CVE-2020-8698)

  - Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to     potentially enable information disclosure via local access. (CVE-2020-8695)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2020-8695

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CVE-2020-8696

Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2020-8698

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

For Debian 9 stretch, these problems have been fixed in version 3.20201118.1~deb9u1.

We recommend that you upgrade your intel-microcode packages.

For the detailed security status of intel-microcode please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/intel-microcode

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
143200	RHEL 7 : microcode_ctl (RHSA-2020:5181)	Nessus	Red Hat Local Security Checks	11/24/2020	11/7/2024	medium
142715	RHEL 7 : microcode_ctl (RHSA-2020:5083)	Nessus	Red Hat Local Security Checks	11/11/2020	11/7/2024	medium
152353	RHEL 7 : microcode_ctl (RHSA-2021:3028)	Nessus	Red Hat Local Security Checks	8/9/2021	11/7/2024	high
143204	RHEL 7 : microcode_ctl (RHSA-2020:5190)	Nessus	Red Hat Local Security Checks	11/24/2020	11/7/2024	medium
142714	RHEL 8 : microcode_ctl (RHSA-2020:5085)	Nessus	Red Hat Local Security Checks	11/11/2020	11/7/2024	medium
150979	Amazon Linux 2 : microcode_ctl (ALAS-2021-1663)	Nessus	Amazon Linux Local Security Checks	6/23/2021	12/11/2024	medium
157646	AlmaLinux 8 : microcode_ctl (ALSA-2021:3027)	Nessus	Alma Linux Local Security Checks	2/9/2022	2/14/2022	high
143137	Fedora 31 : 2:microcode_ctl (2020-14fda1bf85)	Nessus	Fedora Local Security Checks	11/20/2020	2/8/2024	medium
160794	NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0034)	Nessus	NewStart CGSL Local Security Checks	5/9/2022	5/9/2022	high
142817	Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2020:5083)	Nessus	Scientific Linux Local Security Checks	11/12/2020	12/1/2020	medium
154545	NewStart CGSL CORE 5.04 / MAIN 5.04 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0113)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	10/27/2021	high
147243	NewStart CGSL MAIN 6.02 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0079)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	3/10/2021	medium
146278	Debian DLA-2546-1 : intel-microcode security update	Nessus	Debian Local Security Checks	2/8/2021	1/23/2024	medium

Detections

Analytics

Plugins Search

medium

medium

high

medium

medium

medium

high

medium

high

medium

high

medium

medium