SB2021061808 - Arch Linux update for intel-ucode

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2021061808

SB2021061808 - Arch Linux update for intel-ucode

Published: June 18, 2021 Updated: June 21, 2021

Security Bulletin ID SB2021061808
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) Information disclosure (CVE-ID: CVE-2020-24511)

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to improper isolation of shared resources. A local user can gain unauthorized access to sensitive information on the system.


2) Observable discrepancy (CVE-ID: CVE-2020-24512)

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to observable timing discrepancy. A local user can gain unauthorized access to sensitive information on the system.


3) Information disclosure (CVE-ID: CVE-2020-24513)

The vulnerability allows a local user o gain access to potentially sensitive information.

The vulnerability exists due to domain-bypass transient execution issue. A local user can gain unauthorized access to sensitive information on the system.


4) Incomplete cleanup (CVE-ID: CVE-2020-24489)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incomplete cleanup, which leads to security restrictions bypass and privilege escalation.


Remediation

Install update from vendor's website.

References