CVE-2020-24512

Katalog CVE

CVSS 3.3 · Low EPSS 0,38%

Kerentanan Observable Discrepancy pada intel microcode, debian linux +3 lainnya. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Rincian

Terbit di NVD

9 Juni 2021

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html advisory vendor
• https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210611-0005/ advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4934 advisory pihak ketiga