CVE-2020-24511

Katalog CVE

CVSS 6.5 · Medium EPSS 0,40%

Kerentanan Exposure of Resource to Wrong Sphere pada intel microcode, debian linux +3 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Rincian

Terbit di NVD

9 Juni 2021

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-668: Exposure of Resource to Wrong Sphere

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html advisory vendor
• https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210611-0005/ advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4934 advisory pihak ketiga