CVE-2019-11135

Published Nov 14, 2019

Last updated 2 months ago

Overview

Description
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
Source
secure@intel.com
NVD status
Modified
Products
leap, fedora, slackware, apollo_4200_firmware, apollo_2000_firmware, proliant_bl460c_firmware, proliant_dl580_firmware, proliant_dl560_firmware, proliant_dl380_firmware, proliant_dl360_firmware, proliant_dl180_firmware, proliant_dl160_firmware, proliant_dl120_firmware, proliant_dl20_firmware, proliant_ml350_firmware, proliant_ml110_firmware, proliant_ml30_firmware, proliant_xl450_firmware, proliant_xl270d_firmware, proliant_xl230k_firmware, proliant_xl190r_firmware, proliant_xl170r_firmware, synergy_480_firmware, synergy_660_firmware, proliant_e910_firmware, core_i7-10510y_firmware, core_i5-10310y_firmware, core_i5-10210y_firmware, core_i5-10110y_firmware, core_i7-8500y_firmware, core_i5-8310y_firmware, core_i5-8210y_firmware, core_i5-8200y_firmware, core_m3-8100y_firmware, xeon_8253_firmware, xeon_8256_firmware, xeon_8260_firmware, xeon_8260l_firmware, xeon_8260m_firmware, xeon_8260y_firmware, xeon_8268_firmware, xeon_8270_firmware, xeon_8276_firmware, xeon_8276l_firmware, xeon_8276m_firmware, xeon_8280_firmware, xeon_8280l_firmware, xeon_8280m_firmware, xeon_9220_firmware, xeon_9221_firmware, xeon_9222_firmware, xeon_9242_firmware, xeon_9282_firmware, xeon_5215_firmware, xeon_5215l_firmware, xeon_5215m_firmware, xeon_5215r_firmware, xeon_5217_firmware, xeon_5218_firmware, xeon_5218b_firmware, xeon_5218n_firmware, xeon_5218t_firmware, xeon_5220_firmware, xeon_5220r_firmware, xeon_5220s_firmware, xeon_5220t_firmware, xeon_5222_firmware, xeon_6222v_firmware, xeon_6226_firmware, xeon_6230_firmware, xeon_6230n_firmware, xeon_6230t_firmware, xeon_6234_firmware, xeon_6238_firmware, xeon_6238l_firmware, xeon_6238m_firmware, xeon_6238t_firmware, xeon_6240_firmware, xeon_6240l_firmware, xeon_6240m_firmware, xeon_6240y_firmware, xeon_6242_firmware, xeon_6244_firmware, xeon_6246_firmware, xeon_6248_firmware, xeon_6252_firmware, xeon_6252n_firmware, xeon_6254_firmware, xeon_6262v_firmware, xeon_4208_firmware, xeon_4208r_firmware, xeon_4209t_firmware, xeon_4210_firmware, xeon_4210r_firmware, xeon_4214_firmware, xeon_4214c_firmware, xeon_4214r_firmware, xeon_4214y_firmware, xeon_4215_firmware, xeon_4216_firmware, xeon_4216r_firmware, xeon_3204_firmware, xeon_3206r_firmware, xeon_w-3275m_firmware, xeon_w-3275_firmware, xeon_w-3265m_firmware, xeon_w-3265_firmware, xeon_w-3245m_firmware, xeon_w-3245_firmware, xeon_w-3235_firmware, xeon_w-3225_firmware, xeon_w-3223_firmware, xeon_w-2295_firmware, xeon_w-2275_firmware, xeon_w-2265_firmware, xeon_w-2255_firmware, xeon_w-2245_firmware, xeon_w-2235_firmware, xeon_w-2225_firmware, xeon_w-2223_firmware, core_i9-9980hk_firmware, core_i9-9880h_firmware, core_i7-9850h_firmware, core_i7-9750hf_firmware, core_i5-9400h_firmware, core_i5-9300h_firmware, core_i9-9900k_firmware, core_i9-9900kf_firmware, core_i7-9700k_firmware, core_i7-9700kf_firmware, core_i5-9600k_firmware, core_i5-9600kf_firmware, core_i5-9400_firmware, core_i5-9400f_firmware, xeon_e-2288g_firmware, xeon_e-2286m_firmware, xeon_e-2278gel_firmware, xeon_e-2278ge_firmware, xeon_e-2278g_firmware, core_i7-10510u_firmware, core_i5-10210u_firmware, pentium_6405u_firmware, celeron_5305u_firmware, core_i7-8565u_firmware, core_i7-8665u_firmware, core_i5-8365u_firmware, core_i5-8265u_firmware, ubuntu_linux, debian_linux, codeready_linux_builder, codeready_linux_builder_eus, virtualization_manager, enterprise_linux, enterprise_linux_desktop, enterprise_linux_eus, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_tus, enterprise_linux_workstation, zfs_storage_appliance_kit

Risk scores

CVSS 3.1

Type
Primary
Base score
6.5
Impact score
4
Exploitability score
2
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
2.1
Impact score
2.9
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov
NVD-CWE-noinfo

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.