Known vulnerabilities in microcode_ctl (Red Hat package)

Known vulnerabilities in microcode_ctl (Red Hat package)

Vendor: Red Hat Inc.

Software: microcode_ctl (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:microcode_ctl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 16

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU109171 - Incorrect Behavior Order CVE-2025-20012	CWE-696	Low	No	No	20220207-1.20250512.1.el9_0, 20220809-2.20250512.1.el9_2, 20230808-2.20250512.1.el9_4	14.05.2025	SB2025051436 SB2025051953 SB2025051954 and 14 more
#VU109169 - Missing initialization of resource CVE-2025-24495	CWE-909	Low	No	No	20220207-1.20250512.1.el9_0, 20220809-2.20250512.1.el9_2, 20230808-2.20250512.1.el9_4	14.05.2025	SB2025051436 SB2025051953 SB2025051954 and 13 more
#VU109000 - Resource Management Errors CVE-2024-28956	CWE-399	High	No	No	2.1-73.24.el7_9, 20191115-4.20250512.1.el8_2, 20210216-1.20250512.1.el8_4, 20220207-1.20250512.1.el9_0, 20220809-2.20250512.1.el8_8, 20220809-2.20250512.1.el9_2, 20230808-2.20250512.1.el9_4, 20250512-1.el8_10	13.05.2025	SB2025051308 SB2025051309 SB2025051320 and 46 more
#VU54220 - Exposure of sensitive information to an unauthorized actor CVE-2020-24513	CWE-200	Low	No	No	1.17-33.33.el6_10, 2.1-12.37.el7_2, 2.1-16.40.el7_3, 2.1-22.39.el7_4, 2.1-47.21.el7_6, 2.1-53.16.el7_7, 2.1-73.9.el7_9, 20190618-1.20210525.1.el8_1, 20191115-4.20210525.1.el8_2, 20210216-1.20210525.1.el8_4	18.06.2021	SB2021061807 SB2021061808 SB2021062119 and 22 more
#VU54204 - Observable discrepancy CVE-2020-24512	CWE-203	Low	No	No	1.17-33.33.el6_10, 2.1-12.37.el7_2, 2.1-12.39.el7_2, 2.1-16.40.el7_3, 2.1-16.42.el7_3, 2.1-22.39.el7_4, 2.1-22.41.el7_4, 2.1-47.21.el7_6, 2.1-47.23.el7_6, 2.1-53.16.el7_7, 2.1-53.18.el7_7, 2.1-73.9.el7_9, 2.1-73.11.el7_9, 20190618-1.20210525.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20210525.1.el8_2, 20191115-4.20210608.1.el8_2, 20210216-1.20210525.1.el8_4, 20210216-1.20210608.1.el8_4	17.06.2021	SB2021061716 SB2021061808 SB2021062119 and 35 more
#VU54203 - Exposure of sensitive information to an unauthorized actor CVE-2020-24511	CWE-200	Low	No	No	1.17-33.33.el6_10, 2.1-12.37.el7_2, 2.1-12.39.el7_2, 2.1-16.40.el7_3, 2.1-16.42.el7_3, 2.1-22.39.el7_4, 2.1-22.41.el7_4, 2.1-47.21.el7_6, 2.1-47.23.el7_6, 2.1-53.16.el7_7, 2.1-53.18.el7_7, 2.1-73.9.el7_9, 2.1-73.11.el7_9, 20190618-1.20210525.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20210525.1.el8_2, 20191115-4.20210608.1.el8_2, 20210216-1.20210525.1.el8_4, 20210216-1.20210608.1.el8_4	17.06.2021	SB2021061716 SB2021061808 SB2021062119 and 35 more
#VU54191 - Incomplete cleanup CVE-2020-24489	CWE-459	Low	No	No	1.17-33.33.el6_10, 2.1-12.37.el7_2, 2.1-12.39.el7_2, 2.1-16.40.el7_3, 2.1-16.42.el7_3, 2.1-22.39.el7_4, 2.1-22.41.el7_4, 2.1-47.21.el7_6, 2.1-47.23.el7_6, 2.1-53.16.el7_7, 2.1-53.18.el7_7, 2.1-73.9.el7_9, 2.1-73.11.el7_9, 20190618-1.20210525.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20210525.1.el8_2, 20191115-4.20210608.1.el8_2, 20210216-1.20210525.1.el8_4, 20210216-1.20210608.1.el8_4	17.06.2021	SB2021061708 SB2021061808 SB2021062119 and 33 more
#VU48629 - Permissions, Privileges, and Access Controls CVE-2020-8698	CWE-264	Low	No	No	1.17-17.34.el6_5, 1.17-19.32.el6_6, 1.17-33.31.el6_10, 2.1-12.34.el7_2, 2.1-12.39.el7_2, 2.1-16.37.el7_3, 2.1-16.42.el7_3, 2.1-22.36.el7_4, 2.1-22.41.el7_4, 2.1-47.18.el7_6, 2.1-47.23.el7_6, 2.1-53.13.el7_7, 2.1-53.18.el7_7, 2.1-73.2.el7_9, 2.1-73.11.el7_9, 20180807a-2.20201112.1.el8_0, 20190618-1.20201112.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20201112.1.el8_2, 20191115-4.20210608.1.el8_2, 20200609-2.20201027.1.el8_3, 20210216-1.20210608.1.el8_4	12.11.2020	SB2020112423 SB2020112424 SB2020112425 and 31 more
#VU48630 - Permissions, Privileges, and Access Controls CVE-2020-8696	CWE-264	Low	No	No	1.17-17.34.el6_5, 1.17-19.32.el6_6, 1.17-33.31.el6_10, 2.1-12.34.el7_2, 2.1-12.36.el7_2, 2.1-12.39.el7_2, 2.1-16.37.el7_3, 2.1-16.39.el7_3, 2.1-16.42.el7_3, 2.1-22.36.el7_4, 2.1-22.38.el7_4, 2.1-22.41.el7_4, 2.1-47.18.el7_6, 2.1-47.20.el7_6, 2.1-47.23.el7_6, 2.1-53.13.el7_7, 2.1-53.15.el7_7, 2.1-53.18.el7_7, 2.1-73.2.el7_9, 2.1-73.8.el7_9, 2.1-73.11.el7_9, 20180807a-2.20201112.1.el8_0, 20190618-1.20201112.1.el8_1, 20190618-1.20210216.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20201112.1.el8_2, 20191115-4.20210216.1.el8_2, 20191115-4.20210608.1.el8_2, 20200609-2.20201027.1.el8_3, 20200609-2.20210216.1.el8_3, 20210216-1.20210608.1.el8_4	12.11.2020	SB2020112423 SB2020112424 SB2020112425 and 40 more
#VU48372 - Observable Response Discrepancy CVE-2020-8695	CWE-204	Low	No	No	2.1-12.34.el7_2, 2.1-12.39.el7_2, 2.1-16.37.el7_3, 2.1-16.42.el7_3, 2.1-22.36.el7_4, 2.1-22.41.el7_4, 2.1-47.18.el7_6, 2.1-47.23.el7_6, 2.1-53.13.el7_7, 2.1-53.18.el7_7, 2.1-73.2.el7_9, 2.1-73.11.el7_9, 20180807a-2.20201112.1.el8_0, 20190618-1.20201112.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20201112.1.el8_2, 20191115-4.20210608.1.el8_2, 20200609-2.20201027.1.el8_3, 20210216-1.20210608.1.el8_4	11.11.2020	SB2020111117 SB2020112423 SB2020112424 and 35 more
#VU28928 - Exposure of sensitive information to an unauthorized actor CVE-2020-0543	CWE-200	Low	No	No	1.17-33.26.el6_10, 2.1-12.30.el7_2, 2.1-12.39.el7_2, 2.1-16.42.el7_3, 2.1-22.32.el7_4, 2.1-22.41.el7_4, 2.1-47.14.el7_6, 2.1-47.23.el7_6, 2.1-53.9.el7_7, 2.1-53.18.el7_7, 2.1-73.11.el7_9, 20180807a-2.20200609.1.el8_0, 20190618-1.20200609.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20200602.2.el8_2, 20191115-4.20210608.1.el8_2, 20210216-1.20210608.1.el8_4	10.06.2020	SB2020061012 SB2020061014 SB2020061017 and 52 more
#VU24689 - Exposure of sensitive information to an unauthorized actor CVE-2020-0549	CWE-200	Low	No	No	1.17-33.26.el6_10, 2.1-12.30.el7_2, 2.1-12.39.el7_2, 2.1-16.42.el7_3, 2.1-22.32.el7_4, 2.1-22.41.el7_4, 2.1-47.14.el7_6, 2.1-47.23.el7_6, 2.1-53.9.el7_7, 2.1-53.18.el7_7, 2.1-73.11.el7_9, 20180807a-2.20200609.1.el8_0, 20190618-1.20200609.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20200602.2.el8_2, 20191115-4.20210608.1.el8_2, 20210216-1.20210608.1.el8_4	28.01.2020	SB2020012802 SB2020061017 SB2020061018 and 31 more
#VU24688 - Exposure of sensitive information to an unauthorized actor CVE-2020-0548	CWE-200	Low	No	No	1.17-33.26.el6_10, 2.1-12.30.el7_2, 2.1-12.39.el7_2, 2.1-16.42.el7_3, 2.1-22.32.el7_4, 2.1-22.41.el7_4, 2.1-47.14.el7_6, 2.1-47.23.el7_6, 2.1-53.9.el7_7, 2.1-53.18.el7_7, 2.1-73.11.el7_9, 20180807a-2.20200609.1.el8_0, 20190618-1.20200609.1.el8_1, 20190618-1.20210608.1.el8_1, 20191115-4.20200602.2.el8_2, 20191115-4.20210608.1.el8_2, 20210216-1.20210608.1.el8_4	28.01.2020	SB2020012802 SB2020061017 SB2020061018 and 31 more
#VU22782 - Resource Management Errors CVE-2019-11139	CWE-399	Low	No	No	2.1-53.3.el7_7, 20190618-1.20191112.1.el8_1	14.11.2019	SB2019111425 SB2019111427 SB2019111428 and 10 more
#VU22781 - Improper Access Control CVE-2019-0117	CWE-284	Low	No	No	1.17-17.25.el6_5, 1.17-19.23.el6_6, 1.17-33.19.el6_10, 2.1-12.24.el7_2, 2.1-16.27.el7_3, 2.1-22.26.el7_4, 2.1-29.24.el7_5, 2.1-47.8.el7_6, 2.1-53.3.el7_7, 20180807a-2.20191112.1.el8_0, 20190618-1.20191112.1.el8_1	14.11.2019	SB2019111424 SB2019111429 SB2019111232 and 13 more
#VU22704 - Resource Management Errors CVE-2019-11135	CWE-399	Low	No	No	2.1-53.3.el7_7, 20190618-1.20191112.1.el8_1	12.11.2019	SB2019111216 SB2019111332 SB2019111333 and 60 more