多款Intel产品信息泄露漏洞
| CNNVD-ID编号 | CNNVD-201911-624 | CVE编号 | CVE-2019-11135 |
| 发布时间 | 2019-11-12 | 更新时间 | 2021-01-21 |
| 漏洞类型 | 信息泄露 | 漏洞来源 | Ubuntu,Debian,Red Hat,Slackware Security Team,Benjamin M. Romer,Gentoo |
| 危险等级 | 中危 | 威胁类型 | 本地 |
| 厂商 | N/A | ||
漏洞介绍
Intel Core Processor i7-8500Y等都是美国英特尔（Intel）公司的产品。Intel Core Processor i7-8500Y是一款酷睿（Core）i7系列中央处理器（CPU）。Intel Xeon Platinum Processor 8253是一款Xeon Platinum系列服务器中央处理器（CPU）。Intel Xeon Gold Processor 5215是一款Xeon Gold系列服务器中央处理器（CPU）。
多款Intel产品中存在信息泄露漏洞。攻击者可利用该漏洞获取信息。以下产品及版本受到影响：Intel Core Processor i7-8500Y；Intel Xeon Platinum Processor 8253；Intel Xeon Gold Processor 5215；Intel Xeon Silver Processor 4208；Intel Xeon Bronze Processor 3204；Intel Xeon Processor W-3275M等。
漏洞补丁
目前厂商已发布升级了多款Intel产品信息泄露漏洞的补丁，多款Intel产品信息泄露漏洞的补丁获取链接：
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00270.html
参考网址
来源:UBUNTU
链接：https://usn.ubuntu.com/4186-2/
来源:BUGTRAQ
链接：https://seclists.org/bugtraq/2019/Nov/26
来源:MISC
链接：https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00270.html
来源:MLIST
链接：https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html
来源:SUSE
链接：http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html
来源:FEDORA
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0028
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0204
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0666
来源:DEBIAN
链接：https://www.debian.org/security/2020/dsa-4602
来源:SUSE
链接：http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html
来源:FEDORA
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0026
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0366
来源:BUGTRAQ
链接：https://seclists.org/bugtraq/2020/Jan/21
来源:CONFIRM
链接：https://support.f5.com/csp/article/K02912734?utm_source=f5support&utm_medium=RSS
来源:GENTOO
链接：https://security.gentoo.org/glsa/202003-56
来源:MLIST
链接：http://www.openwall.com/lists/oss-security/2019/12/11/1
来源:MISC
链接：https://www.oracle.com/security-alerts/cpujan2021.html
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2019:3936
来源:CONFIRM
链接：https://kc.mcafee.com/corporate/index?page=content&id=SB10306
来源:CONFIRM
链接：https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03968en_us
来源:MLIST
链接：http://www.openwall.com/lists/oss-security/2019/12/10/4
来源:MLIST
链接：http://www.openwall.com/lists/oss-security/2019/12/10/3
来源:MISC
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0555
来源:BUGTRAQ
链接：https://seclists.org/bugtraq/2019/Dec/28
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0279
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0730
来源:SUSE
链接：http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193089-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193090-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193294-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193295-1.html
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2020:0028
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2020:0026
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193340-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193348-1.html
来源:www.debian.org
链接：https://www.debian.org/security/2020/dsa-4602
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3835
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3844
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3833
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3936
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192959-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192958-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192957-1.html
来源:www.vmware.com
链接：https://www.vmware.com/security/advisories/VMSA-2019-0020.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193293-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193307-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193308-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200334-1.html
来源:www.intel.com
链接：https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00237.html
来源:support.citrix.com
链接：https://support.citrix.com/article/CTX263684
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193200-1.html
来源:www.wireshark.org
链接：https://www.wireshark.org/docs/relnotes/wireshark-2.6.13.html
来源:www.wireshark.org
链接：https://www.wireshark.org/docs/relnotes/wireshark-3.0.7.html
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2020:0555
来源:lists.debian.org
链接：https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html
来源:security.freebsd.org
链接：https://security.freebsd.org/advisories/FreeBSD-SA-19:26.mcu.asc
来源:access.redhat.com
链接：https://access.redhat.com/security/cve/cve-2019-11135
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/156610/Red-Hat-Security-Advisory-2020-0666-01.html
来源:www.ibm.com
链接：https://www.ibm.com/blogs/psirt/xsa-304-and-xsa-305-security-vulnerabilities/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4508/
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/156920/Gentoo-Linux-Security-Advisory-202003-56.html
来源:www.ibm.com
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155680/Debian-Security-Advisory-4565-2.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.1417/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0833/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4358/
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155545/Ubuntu-Security-Notice-USN-4182-3.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0437/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4584/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4730/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4255/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4247/
来源:support.lenovo.com
链接：https://support.lenovo.com/us/en/product_security/LEN-27714
来源:packetstormsecurity.com
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155847/Red-Hat-Security-Advisory-2020-0028-01.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.1340/
来源:vigilance.fr
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155418/Red-Hat-Security-Advisory-2019-3936-01.html
来源:nvd.nist.gov
链接：https://nvd.nist.gov/vuln/detail/CVE-2019-11135
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155294/Red-Hat-Security-Advisory-2019-3839-01.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4406/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4339/
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/156635/Red-Hat-Security-Advisory-2020-0730-01.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4675.2/
来源:www.ibm.com
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4676/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4301/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0127/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0589/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.2696/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0791/
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155318/Kernel-Live-Patch-Security-Notice-LSN-0059-1.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0049/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0153/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0561/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4266.2/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0009/
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/156210/Red-Hat-Security-Advisory-2020-0366-01.html
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155956/Debian-Security-Advisory-4602-1.html
来源:portal.msrc.microsoft.com
链接：https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2019-11135
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155335/Ubuntu-Security-Notice-USN-4186-3.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.3554/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4346.2/
受影响实体
暂无
信息来源
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201911-624
评论