- Vulnerability/
- USN-4182-2
USN-4182-2: Intel Microcode update
First published: Tue Nov 12 2019(Updated: )
USN-4182-2 provided updates for Intel Microcode. This update provides the corresponding update for Ubuntu 14.04 ESM. Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions (TSX) could expose memory contents previously stored in microarchitectural buffers to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11135) It was discovered that certain Intel Xeon processors did not properly restrict access to a voltage modulation interface. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2019-11139)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/intel-microcode | <3.20191112-0ubuntu0.14.04.2 | 3.20191112-0ubuntu0.14.04.2 |
| =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-11135
- https://ubuntu.com/security/CVE-2019-11139
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/TAA_MCEPSC_i915
- https://ubuntu.com/security/notices/USN-4186-1
- https://ubuntu.com/security/notices/USN-4186-2
- https://ubuntu.com/security/notices/USN-4182-1
- https://ubuntu.com/security/notices/USN-4187-1
- https://ubuntu.com/security/notices/USN-4188-1
- https://ubuntu.com/security/notices/USN-4184-1
- https://ubuntu.com/security/notices/USN-4185-2
- https://ubuntu.com/security/notices/USN-4185-1
- https://ubuntu.com/security/notices/USN-4183-1
- https://launchpad.net/ubuntu/+source/intel-microcode/3.20191112-0ubuntu0.14.04.2
- https://ubuntu.com/security/notices/USN-4182-2 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this update?
The vulnerability ID for this update is CVE-2019-11135.
What is the vulnerability ID for another related update?
Another related vulnerability ID is CVE-2019-11139.
Which Ubuntu version is affected by this vulnerability?
Ubuntu 14.04 is affected by this vulnerability.
What is the package that needs to be updated?
The package that needs to be updated is intel-microcode.
How can I fix this vulnerability?
To fix this vulnerability, update intel-microcode package to version 3.20191112-0ubuntu0.14.04.2 or newer.
- agent/references
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/description
- agent/title
- agent/tags
- agent/trending
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/14.04