CVE-2020-0549

high-risk

Published 2020-01-28

Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Do I need to act?

0.09% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (20)

Core I7-8700B Firmware

Core I7-8569U Firmware

Core I7 8650U Firmware

Core I7 8565U Firmware

Core I7 8560U Firmware

Core I7 8559U Firmware

Core I7 8550U Firmware

Core I7 8500Y Firmware

Core I7 10510Y Firmware

Core I5 10310Y Firmware

Core I5 10210Y Firmware

Core I5 10110Y Firmware

Xeon 8253 Firmware

Xeon 8256 Firmware

Xeon 8260 Firmware

Xeon 8260L Firmware

Xeon 8260M Firmware

Xeon 8260Y Firmware

Xeon 8268 Firmware

Xeon 8270 Firmware

Affected Vendors

Debian Intel Canonical Fedoraproject Opensuse

References (18)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html

Broken Link https://kc.mcafee.com/corporate/index?page=content&id=SB10318

Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00019.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20200210-0004/

Third Party Advisory https://usn.ubuntu.com/4385-1/

Third Party Advisory https://www.debian.org/security/2020/dsa-4701

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00329....

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html

Broken Link https://kc.mcafee.com/corporate/index?page=content&id=SB10318

Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00019.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20200210-0004/

Third Party Advisory https://usn.ubuntu.com/4385-1/

Third Party Advisory https://www.debian.org/security/2020/dsa-4701

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00329....

/ 100

high-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 33/34 · Critical