CVE-2019-11135

Name
CVE-2019-11135
Description
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00270.html
Third Party Advisory https://support.f5.com/csp/article/K02912734?utm_source=f5support&utm_medium=RSS
Mailing List https://seclists.org/bugtraq/2019/Nov/26
Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html
Patch http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
Third Party Advisory https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03968en_us
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3936
Third Party Advisory https://usn.ubuntu.com/4186-2/
Third Party Advisory https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
Mailing List http://www.openwall.com/lists/oss-security/2019/12/10/3
Third Party Advisory http://www.openwall.com/lists/oss-security/2019/12/10/4
Mailing List http://www.openwall.com/lists/oss-security/2019/12/11/1
BUGTRAQ https://seclists.org/bugtraq/2019/Dec/28
MLIST https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html
SUSE http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.html
REDHAT https://access.redhat.com/errata/RHSA-2020:0026
REDHAT https://access.redhat.com/errata/RHSA-2020:0028
DEBIAN https://www.debian.org/security/2020/dsa-4602
BUGTRAQ https://seclists.org/bugtraq/2020/Jan/21
REDHAT https://access.redhat.com/errata/RHSA-2020:0204
REDHAT https://access.redhat.com/errata/RHSA-2020:0279
REDHAT https://access.redhat.com/errata/RHSA-2020:0366
CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10306
REDHAT https://access.redhat.com/errata/RHSA-2020:0555
REDHAT https://access.redhat.com/errata/RHSA-2020:0666
REDHAT https://access.redhat.com/errata/RHSA-2020:0730
GENTOO https://security.gentoo.org/glsa/202003-56
MISC https://www.oracle.com/security-alerts/cpujan2021.html
secure@intel.com https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
secure@intel.com https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
secure@intel.com https://support.f5.com/csp/article/K02912734?utm_source=f5support&amp%3Butm_medium=RSS

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* leap == None == 15.0
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* leap == None == 15.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
xen edge-main 4.13.0-r0 None fixed
xen 3.22-main 4.13.0-r0 None fixed
xen 3.21-main 4.13.0-r0 None fixed
xen 3.20-main 4.13.0-r0 None fixed
xen 3.19-main 4.13.0-r0 None fixed
xen 3.18-main 4.13.0-r0 None fixed
xen 3.17-main 4.13.0-r0 None fixed
xen 3.12-main 4.13.0-r0 None fixed
xen 3.11-main 4.13.0-r0 None fixed
xen 3.10-main 4.12.1-r1 None fixed
intel-ucode edge-main 20191113-r0 None fixed
intel-ucode edge-main 20191112-r0 None fixed
intel-ucode edge-main 20190918-r0 None fixed
intel-ucode 3.22-main 20191113-r0 None fixed
intel-ucode 3.22-main 20191112-r0 None fixed
intel-ucode 3.22-main 20190918-r0 None fixed
intel-ucode 3.21-main 20191113-r0 None fixed
intel-ucode 3.21-main 20191112-r0 None fixed
intel-ucode 3.21-main 20190918-r0 None fixed
intel-ucode 3.20-main 20191113-r0 None fixed
intel-ucode 3.20-main 20191112-r0 None fixed
intel-ucode 3.20-main 20190918-r0 None fixed
intel-ucode 3.19-main 20191113-r0 None fixed
intel-ucode 3.19-main 20191112-r0 None fixed
intel-ucode 3.19-main 20190918-r0 None fixed
intel-ucode 3.18-main 20191113-r0 None fixed
intel-ucode 3.18-main 20191112-r0 None fixed
intel-ucode 3.18-main 20190918-r0 None fixed
intel-ucode 3.17-main 20191113-r0 None fixed
intel-ucode 3.17-main 20191112-r0 None fixed
intel-ucode 3.17-main 20190918-r0 None fixed