Summary
Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine
Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running
Average Power Limit (RAPL) feature of some Intel processors allowed a side-
channel attack based on power consumption measurements. A local attacker
could possibly use this to expose sensitive information. (CVE-2020-8695)
Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that
some Intel(R) Processors did not properly remove sensitive information
before storage or transfer in some situations. A local attacker could
possibly use this to expose sensitive information. (CVE-2020-8696)
Ezra Caltum, Joseph Nuzman, Nir Shildan and Ofir Joseff discovered that
some Intel(R) Processors did not properly isolate shared resources in some
situations. A local attacker could possibly use this to expose sensitive
information. (CVE-2020-8698)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | intel-microcode | 3.20201110.0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | intel-microcode | 3.20201110.0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | intel-microcode | 3.20201110.0ubuntu0.20.04.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | intel-microcode | 3.20201110.0ubuntu0.14.04.1 |
Vulnerabilities 3
-
Unscored —
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially en…
-
Unscored —
Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authentic…
-
Unscored —
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enabl…