Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
None
Privileges Required
Low
Attack Vector
Local
0

CVE-2019-11135

Disclosure Date: November 14, 2019 •
CVE-2019-11135 CVSS v3 Base Score: 6.5
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
6.5 Medium
Impact Score:
4
Exploitability Score:
2
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Changed
Confidentiality (C):
High
Integrity (I):
None
Availability (A):
None

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
2019.2 IPU – TSX Asynchronous Abort See provided reference
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

  • canonical,
  • debian,
  • fedoraproject,
  • hp,
  • intel,
  • opensuse,
  • oracle,
  • redhat,
  • slackware

Products

  • apollo 2000 firmware,
  • apollo 4200 firmware,
  • celeron 5305u firmware -,
  • codeready linux builder 8.0,
  • codeready linux builder eus 8.1,
  • codeready linux builder eus 8.2,
  • codeready linux builder eus 8.4,
  • codeready linux builder eus 8.6,
  • core i5-10110y firmware -,
  • core i5-10210u firmware -,
  • core i5-10210y firmware -,
  • core i5-10310y firmware -,
  • core i5-8200y firmware -,
  • core i5-8210y firmware -,
  • core i5-8265u firmware -,
  • core i5-8310y firmware -,
  • core i5-8365u firmware -,
  • core i5-9300h firmware -,
  • core i5-9400 firmware -,
  • core i5-9400f firmware -,
  • core i5-9400h firmware -,
  • core i5-9600k firmware -,
  • core i5-9600kf firmware -,
  • core i7-10510u firmware -,
  • core i7-10510y firmware -,
  • core i7-8500y firmware -,
  • core i7-8565u firmware -,
  • core i7-8665u firmware -,
  • core i7-9700k firmware -,
  • core i7-9700kf firmware -,
  • core i7-9750hf firmware -,
  • core i7-9850h firmware -,
  • core i9-9880h firmware -,
  • core i9-9900k firmware -,
  • core i9-9900kf firmware -,
  • core i9-9980hk firmware -,
  • core m3-8100y firmware -,
  • debian linux 10.0,
  • debian linux 8.0,
  • debian linux 9.0,
  • enterprise linux 8.0,
  • enterprise linux desktop 7.0,
  • enterprise linux eus 7.6,
  • enterprise linux eus 7.7,
  • enterprise linux eus 8.1,
  • enterprise linux eus 8.2,
  • enterprise linux eus 8.4,
  • enterprise linux eus 8.6,
  • enterprise linux server 7.0,
  • enterprise linux server aus 7.6,
  • enterprise linux server aus 7.7,
  • enterprise linux server aus 8.2,
  • enterprise linux server aus 8.4,
  • enterprise linux server aus 8.6,
  • enterprise linux server tus 7.6,
  • enterprise linux server tus 7.7,
  • enterprise linux server tus 8.2,
  • enterprise linux server tus 8.4,
  • enterprise linux server tus 8.6,
  • enterprise linux workstation 7.0,
  • fedora 30,
  • fedora 31,
  • leap 15.0,
  • leap 15.1,
  • pentium 6405u firmware -,
  • proliant bl460c firmware,
  • proliant dl120 firmware,
  • proliant dl160 firmware,
  • proliant dl180 firmware,
  • proliant dl20 firmware,
  • proliant dl360 firmware,
  • proliant dl380 firmware,
  • proliant dl560 firmware,
  • proliant dl580 firmware,
  • proliant e910 firmware,
  • proliant ml110 firmware,
  • proliant ml30 firmware,
  • proliant ml350 firmware,
  • proliant xl170r firmware,
  • proliant xl190r firmware,
  • proliant xl230k firmware,
  • proliant xl270d firmware,
  • proliant xl450 firmware,
  • slackware 14.2,
  • synergy 480 firmware,
  • synergy 660 firmware,
  • ubuntu linux 14.04,
  • virtualization manager 4.2,
  • xeon 3204 firmware -,
  • xeon 3206r firmware -,
  • xeon 4208 firmware -,
  • xeon 4208r firmware -,
  • xeon 4209t firmware -,
  • xeon 4210 firmware -,
  • xeon 4210r firmware -,
  • xeon 4214 firmware -,
  • xeon 4214c firmware -,
  • xeon 4214r firmware -,
  • xeon 4214y firmware -,
  • xeon 4215 firmware -,
  • xeon 4216 firmware -,
  • xeon 4216r firmware -,
  • xeon 5215 firmware -,
  • xeon 5215l firmware -,
  • xeon 5215m firmware -,
  • xeon 5215r firmware -,
  • xeon 5217 firmware -,
  • xeon 5218 firmware -,
  • xeon 5218b firmware -,
  • xeon 5218n firmware -,
  • xeon 5218t firmware -,
  • xeon 5220 firmware -,
  • xeon 5220r firmware -,
  • xeon 5220s firmware -,
  • xeon 5220t firmware -,
  • xeon 5222 firmware -,
  • xeon 6222v firmware -,
  • xeon 6226 firmware -,
  • xeon 6230 firmware -,
  • xeon 6230n firmware -,
  • xeon 6230t firmware -,
  • xeon 6234 firmware -,
  • xeon 6238 firmware -,
  • xeon 6238l firmware -,
  • xeon 6238m firmware -,
  • xeon 6238t firmware -,
  • xeon 6240 firmware -,
  • xeon 6240l firmware -,
  • xeon 6240m firmware -,
  • xeon 6240y firmware -,
  • xeon 6242 firmware -,
  • xeon 6244 firmware -,
  • xeon 6246 firmware -,
  • xeon 6248 firmware -,
  • xeon 6252 firmware -,
  • xeon 6252n firmware -,
  • xeon 6254 firmware -,
  • xeon 6262v firmware -,
  • xeon 8253 firmware -,
  • xeon 8256 firmware -,
  • xeon 8260 firmware -,
  • xeon 8260l firmware -,
  • xeon 8260m firmware -,
  • xeon 8260y firmware -,
  • xeon 8268 firmware -,
  • xeon 8270 firmware -,
  • xeon 8276 firmware -,
  • xeon 8276l firmware -,
  • xeon 8276m firmware -,
  • xeon 8280 firmware -,
  • xeon 8280l firmware -,
  • xeon 8280m firmware -,
  • xeon 9220 firmware -,
  • xeon 9221 firmware -,
  • xeon 9222 firmware -,
  • xeon 9242 firmware -,
  • xeon 9282 firmware -,
  • xeon e-2278g firmware -,
  • xeon e-2278ge firmware -,
  • xeon e-2278gel firmware -,
  • xeon e-2286m firmware -,
  • xeon e-2288g firmware -,
  • xeon w-2223 firmware -,
  • xeon w-2225 firmware -,
  • xeon w-2235 firmware -,
  • xeon w-2245 firmware -,
  • xeon w-2255 firmware -,
  • xeon w-2265 firmware -,
  • xeon w-2275 firmware -,
  • xeon w-2295 firmware -,
  • xeon w-3223 firmware -,
  • xeon w-3225 firmware -,
  • xeon w-3235 firmware -,
  • xeon w-3245 firmware -,
  • xeon w-3245m firmware -,
  • xeon w-3265 firmware -,
  • xeon w-3265m firmware -,
  • xeon w-3275 firmware -,
  • xeon w-3275m firmware -,
  • zfs storage appliance kit 8.8

References

Canonical
CVE-2019-11135 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11135)
Advisory
https://support.f5.com/csp/article/K02912734?utm_source=f5support&utm_medium=RSS
20191118 [slackware-security] Slackware 14.2 kernel (SSA:2019-320-01) (https://seclists.org/bugtraq/2019/Nov/26)
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html
FEDORA-2019-376ec5c107 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03968en_us
https://access.redhat.com/errata/RHSA-2019:3936
USN-4186-2 (https://usn.ubuntu.com/4186-2)
FEDORA-2019-cbb732f760 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH)
[oss-security] 20191210 CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135) (http://www.openwall.com/lists/oss-security/2019/12/10/3)
[oss-security] 20191210 Re: CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135) (http://www.openwall.com/lists/oss-security/2019/12/10/4)
[oss-security] 20191211 Re: CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135) (http://www.openwall.com/lists/oss-security/2019/12/11/1)
20191216 [SECURITY] [DSA 4565-2] intel-microcode security update (https://seclists.org/bugtraq/2019/Dec/28)
[debian-lts-announce] 20191230 [SECURITY] [DLA 2051-1] intel-microcode security update (https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html)
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.html
https://access.redhat.com/errata/RHSA-2020:0026
https://access.redhat.com/errata/RHSA-2020:0028
DSA-4602 (https://www.debian.org/security/2020/dsa-4602)
20200114 [SECURITY] [DSA 4602-1] xen security update (https://seclists.org/bugtraq/2020/Jan/21)
https://access.redhat.com/errata/RHSA-2020:0204
https://access.redhat.com/errata/RHSA-2020:0279
https://access.redhat.com/errata/RHSA-2020:0366
https://kc.mcafee.com/corporate/index?page=content&id=SB10306
https://access.redhat.com/errata/RHSA-2020:0555
https://access.redhat.com/errata/RHSA-2020:0666
https://access.redhat.com/errata/RHSA-2020:0730
GLSA-202003-56 (https://security.gentoo.org/glsa/202003-56)
FEDORA-2019-376ec5c107 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/)
USN-4186-2 (https://usn.ubuntu.com/4186-2/)
FEDORA-2019-cbb732f760 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/)
Miscellaneous
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00270.html
http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
https://www.oracle.com/security-alerts/cpujan2021.html

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis