CVE-2020-0543 CROSSTALK

Description

Incomplete cleanup from specific special register read operations in some Intel® Processors may allow an authenticated user to potentially enable information disclosure via local access.

Add Assessment

busterb (317)

June 15, 2020 8:18pm UTC (4 years ago)•

Ratings

Attacker Value

Low

Exploitability

Medium

Common in enterprise Easy to weaponize Vulnerable in default configuration

Technical Analysis

This continues to bury SGX as an actual security mechanism users should be interested in. For leaking keys where you have local access, this is useful for Intel CPUs manufactured in the last 5 years. For general purpose exploitation though, this is less likely to be useful, and the overall risk of using this mechanism still leaves many developers who might use this feature suspicious as they ever were.

The huge performance degradation of RDRAND also isn’t great, though the real problem is for virtual hosting providers where a malicious process or VM can kill overall memory bus performance. https://www.phoronix.com/scan.php?page=news_item&px=RdRand-3-Percent

There are some funny secret-squirrel uses here for the mitigation, as it enables a totally different side-channel problem, but nothing you’d likely see more as a novelty: https://twitter.com/Kryptoblog/status/1270601775184334849

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

5.5 Medium

Impact Score:

3.6

Exploitability Score:

1.8

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector (AV):

Local

Attack Complexity (AC):

Low

Privileges Required (PR):

Low

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

High

Integrity (I):

None

Availability (A):

None

Vendors

canonical,
fedoraproject,
intel,
mcafee,
opensuse,
siemens

Products

celeron 1000m -,
celeron 1005m -,
celeron 1007u -,
celeron 1017u -,
celeron 1019y -,
celeron 1020e -,
celeron 1020m -,
celeron 1037u -,
celeron 1047ue -,
celeron 2955u -,
celeron 2957u -,
celeron 2970m -,
celeron 2980u -,
celeron 2981u -,
celeron 3755u -,
celeron 3765u -,
celeron 3855u -,
celeron 3865u -,
celeron 3955u -,
celeron 3965u -,
celeron 3965y -,
celeron 5305u -,
celeron 725c -,
celeron 927ue -,
celeron g1610 -,
celeron g1610t -,
celeron g1620 -,
celeron g1620t -,
celeron g1630 -,
celeron g1820 -,
celeron g1820t -,
celeron g1830 -,
celeron g1840 -,
celeron g1840t -,
celeron g1850 -,
celeron g3900 -,
celeron g3900t -,
celeron g3900te -,
celeron g3902e -,
celeron g3920 -,
celeron g3920t -,
celeron g3930e -,
celeron g3930te -,
celeron g3940 -,
celeron g4900 -,
celeron g4900t -,
celeron g4920 -,
celeron g4930 -,
celeron g4950 -,
core 4205u -,
core 4410y -,
core 4415y -,
core 5405u -,
core 8269u -,
core 9300h -,
core 9750hf -,
core i3-2115c -,
core i3-3110m -,
core i3-3115c -,
core i3-3120m -,
core i3-3120me -,
core i3-3130m -,
core i3-3210 -,
core i3-3217u -,
core i3-3217ue -,
core i3-3220 -,
core i3-3220t -,
core i3-3225 -,
core i3-3227u -,
core i3-3229y -,
core i3-3240 -,
core i3-3240t -,
core i3-3245 -,
core i3-3250 -,
core i3-3250t -,
core i3-4005u -,
core i3-4010u -,
core i3-4010y -,
core i3-4012y -,
core i3-4020y -,
core i3-4025u -,
core i3-4030u -,
core i3-4030y -,
core i3-4100m -,
core i3-4100u -,
core i3-4110m -,
core i3-4120u -,
core i3-4130 -,
core i3-4130t -,
core i3-4150 -,
core i3-4150t -,
core i3-4158u -,
core i3-4160 -,
core i3-4160t -,
core i3-4170 -,
core i3-4170t -,
core i3-4330 -,
core i3-4330t -,
core i3-4340 -,
core i3-4350 -,
core i3-4350t -,
core i3-4360 -,
core i3-4360t -,
core i3-4370 -,
core i3-4370t -,
core i3-5005u -,
core i3-5006u -,
core i3-5010u -,
core i3-5015u -,
core i3-5020u -,
core i3-5157u -,
core i3-6100 -,
core i3-6100e -,
core i3-6100h -,
core i3-6100t -,
core i3-6100te -,
core i3-6100u -,
core i3-6102e -,
core i3-6110u -,
core i3-6120 -,
core i3-6120t -,
core i3-6167u -,
core i3-6300 -,
core i3-6300t -,
core i3-6320 -,
core i3-6320t -,
core i3-7007u -,
core i3-7020u -,
core i3-7100e -,
core i3-7100h -,
core i3-7100u -,
core i3-7101e -,
core i3-7101te -,
core i3-7102e -,
core i3-7110u -,
core i3-7120 -,
core i3-7120t -,
core i3-7130u -,
core i3-7167u -,
core i3-7320t -,
core i3-7340 -,
core i3-8000 -,
core i3-8000t -,
core i3-8020 -,
core i3-8100 -,
core i3-8100h -,
core i3-8100t -,
core i3-8109u -,
core i3-8120 -,
core i3-8130u -,
core i3-8145u -,
core i3-8300 -,
core i3-8300t -,
core i3-8350k -,
core i3-i3-8100h -,
core i5-10110y -,
core i5-10210u -,
core i5-10210y -,
core i5-10310y -,
core i5-3210m -,
core i5-3230m -,
core i5-3317u -,
core i5-3320m -,
core i5-3330 -,
core i5-3330s -,
core i5-3337u -,
core i5-3339y -,
core i5-3340 -,
core i5-3340m -,
core i5-3340s -,
core i5-3350p -,
core i5-3360m -,
core i5-3380m -,
core i5-3427u -,
core i5-3437u -,
core i5-3439y -,
core i5-3450 -,
core i5-3450s -,
core i5-3470 -,
core i5-3470s -,
core i5-3470t -,
core i5-3475s -,
core i5-3550 -,
core i5-3550s -,
core i5-3570 -,
core i5-3570k -,
core i5-3570s -,
core i5-3570t -,
core i5-3610me -,
core i5-4200u -,
core i5-4200y -,
core i5-4202y -,
core i5-4210h -,
core i5-4210u -,
core i5-4210y -,
core i5-4220y -,
core i5-4250u -,
core i5-4258u -,
core i5-4260u -,
core i5-4278u -,
core i5-4288u -,
core i5-4300u -,
core i5-4300y -,
core i5-4302y -,
core i5-4308u -,
core i5-4350u -,
core i5-4402ec -,
core i5-4430 -,
core i5-4430s -,
core i5-4440 -,
core i5-4440s -,
core i5-4460 -,
core i5-4460s -,
core i5-4460t -,
core i5-4570 -,
core i5-4570r -,
core i5-4570s -,
core i5-4570t -,
core i5-4590 -,
core i5-4590s -,
core i5-4590t -,
core i5-4670 -,
core i5-4670k -,
core i5-4670r -,
core i5-4670s -,
core i5-4670t -,
core i5-4690 -,
core i5-4690s -,
core i5-4690t -,
core i5-5200u -,
core i5-5250u -,
core i5-5257u -,
core i5-5287u -,
core i5-5350 -,
core i5-5350u -,
core i5-5575r -,
core i5-5675c -,
core i5-5675r -,
core i5-6200u -,
core i5-6210u -,
core i5-6260u -,
core i5-6267u -,
core i5-6287u -,
core i5-6300hq -,
core i5-6300u -,
core i5-6310u -,
core i5-6350hq -,
core i5-6360u -,
core i5-6400 -,
core i5-6400t -,
core i5-6440eq -,
core i5-6440hq -,
core i5-6442eq -,
core i5-6500 -,
core i5-6500t -,
core i5-6500te -,
core i5-6600 -,
core i5-6600k -,
core i5-6600t -,
core i5-7200u -,
core i5-7210u -,
core i5-7260u -,
core i5-7267u -,
core i5-7287u -,
core i5-7300hq -,
core i5-7300u -,
core i5-7360u -,
core i5-7400 -,
core i5-7400t -,
core i5-7440eq -,
core i5-7440hq -,
core i5-7442eq -,
core i5-7500 -,
core i5-7500t -,
core i5-7500u -,
core i5-7600 -,
core i5-7600k -,
core i5-7600t -,
core i5-7640x -,
core i5-7y54 -,
core i5-7y57 -,
core i5-8200y -,
core i5-8210y -,
core i5-8250u -,
core i5-8259u -,
core i5-8265u -,
core i5-8300h -,
core i5-8305g -,
core i5-8310y -,
core i5-8350u -,
core i5-8365u -,
core i5-8400 -,
core i5-8400b -,
core i5-8400h -,
core i5-8400t -,
core i5-8420 -,
core i5-8420t -,
core i5-8500 -,
core i5-8500b -,
core i5-8500t -,
core i5-8550 -,
core i5-8600 -,
core i5-8600k -,
core i5-8600t -,
core i5-8650 -,
core i5-8650k -,
core i5-9400 -,
core i5-9400f -,
core i5-9400h -,
core i5-9600k -,
core i5-9600kf -,
core i7-10510u -,
core i7-10510y -,
core i7-3517u -,
core i7-3517ue -,
core i7-3520m -,
core i7-3537u -,
core i7-3540m -,
core i7-3555le -,
core i7-3610qe -,
core i7-3610qm -,
core i7-3612qe -,
core i7-3612qm -,
core i7-3615qe -,
core i7-3615qm -,
core i7-3630qm -,
core i7-3632qm -,
core i7-3635qm -,
core i7-3667u -,
core i7-3687u -,
core i7-3689y -,
core i7-3720qm -,
core i7-3740qm -,
core i7-3770 -,
core i7-3770k -,
core i7-3770s -,
core i7-3770t -,
core i7-3820qm -,
core i7-3840qm -,
core i7-3920xm -,
core i7-3940xm -,
core i7-4500u -,
core i7-4510u -,
core i7-4550u -,
core i7-4558u -,
core i7-4578u -,
core i7-4600u -,
core i7-4610y -,
core i7-4650u -,
core i7-4700ec -,
core i7-4700eq -,
core i7-4700hq -,
core i7-4700mq -,
core i7-4702ec -,
core i7-4702hq -,
core i7-4702mq -,
core i7-4710hq -,
core i7-4710mq -,
core i7-4712hq -,
core i7-4712mq -,
core i7-4720hq -,
core i7-4722hq -,
core i7-4750hq -,
core i7-4760hq -,
core i7-4765t -,
core i7-4770 -,
core i7-4770hq -,
core i7-4770k -,
core i7-4770r -,
core i7-4770s -,
core i7-4770t -,
core i7-4771 -,
core i7-4785t -,
core i7-4790 -,
core i7-4790s -,
core i7-4790t -,
core i7-4800mq -,
core i7-4810mq -,
core i7-4850hq -,
core i7-4860hq -,
core i7-4870hq -,
core i7-4900mq -,
core i7-4910mq -,
core i7-4950hq -,
core i7-4960hq -,
core i7-4980hq -,
core i7-5500u -,
core i7-5550u -,
core i7-5557u -,
core i7-5600u -,
core i7-5650u -,
core i7-5700eq -,
core i7-5700hq -,
core i7-5750hq -,
core i7-5775c -,
core i7-5775r -,
core i7-5850eq -,
core i7-5850hq -,
core i7-5950hq -,
core i7-6500u -,
core i7-6510u -,
core i7-6560u -,
core i7-6567u -,
core i7-6600u -,
core i7-6650u -,
core i7-6660u -,
core i7-6700 -,
core i7-6700hq -,
core i7-6700k -,
core i7-6700t -,
core i7-6700te -,
core i7-6770hq -,
core i7-6820eq -,
core i7-6820hk -,
core i7-6820hq -,
core i7-6822eq -,
core i7-6870hq -,
core i7-6920hq -,
core i7-6970hq -,
core i7-7500u -,
core i7-7510u -,
core i7-7560u -,
core i7-7567u -,
core i7-7600u -,
core i7-7660u -,
core i7-7700 -,
core i7-7700hq -,
core i7-7700k -,
core i7-7700t -,
core i7-7740x -,
core i7-7820eq -,
core i7-7820hk -,
core i7-7820hq -,
core i7-7920hq -,
core i7-7y75 -,
core i7-8500y -,
core i7-8510y -,
core i7-8550u -,
core i7-8557u -,
core i7-8559u -,
core i7-8560u -,
core i7-8565u -,
core i7-8569u -,
core i7-8650u -,
core i7-8665u -,
core i7-8670 -,
core i7-8670t -,
core i7-8700 -,
core i7-8700b -,
core i7-8700k -,
core i7-8700t -,
core i7-8705g -,
core i7-8706g -,
core i7-8709g -,
core i7-8750h -,
core i7-8809g -,
core i7-8850h -,
core i7-9700k -,
core i7-9700kf -,
core i7-9850h -,
core i9-8950hk -,
core i9-9880h -,
core i9-9900k -,
core i9-9900kf -,
core i9-9980hk -,
core m-5y10 -,
core m-5y10a -,
core m-5y10c -,
core m-5y3 -,
core m-5y51 -,
core m-5y70 -,
core m-5y71 -,
core m3-6y30 -,
core m3-7y30 -,
core m3-8100y -,
core m5-6y54 -,
core m5-6y57 -,
core m7-6y75 -,
fedora 31,
fedora 32,
leap 15.1,
leap 15.2,
pentium 1405 v2 -,
pentium 2020m v2 -,
pentium 2030m v2 -,
pentium 2117u v2 -,
pentium 2127u v2 -,
pentium 2129y v2 -,
pentium 3205u -,
pentium 3215u -,
pentium 3556u -,
pentium 3558u -,
pentium 3560m -,
pentium 3560y -,
pentium 3561y -,
pentium 3665u -,
pentium 3765u -,
pentium 3805u -,
pentium 3825u -,
pentium 4405u -,
pentium 4405y -,
pentium 4415u -,
pentium a1018 v2 -,
pentium b915c -,
pentium b925c -,
pentium g2010 v2 -,
pentium g2020 v2 -,
pentium g2020t v2 -,
pentium g2030 v2 -,
pentium g2030t v2 -,
pentium g2100t v2 -,
pentium g2120 v2 -,
pentium g2120t v2 -,
pentium g2130 v2 -,
pentium g2140 v2 -,
pentium g3220 -,
pentium g3220t -,
pentium g3240 -,
pentium g3240t -,
pentium g3250 -,
pentium g3250t -,
pentium g3258 -,
pentium g3260 -,
pentium g3260t -,
pentium g3420 -,
pentium g3420t -,
pentium g3430 -,
pentium g3440 -,
pentium g3440t -,
pentium g3450 -,
pentium g3450t -,
pentium g3460 -,
pentium g3460t -,
pentium g3470 -,
pentium g4400 -,
pentium g4400t -,
pentium g4400te -,
pentium g4420 -,
pentium g4420t -,
pentium g4500 -,
pentium g4500t -,
pentium g4520 -,
pentium g4520t -,
pentium g4540 -,
pentium g5400 -,
pentium g5400t -,
pentium g5420 -,
pentium g5420t -,
pentium g5500 -,
pentium g5500t -,
pentium g5600 -,
pentium gold 6405u -,
simatic field pg m4 firmware,
simatic field pg m5 firmware,
simatic field pg m6 firmware,
simatic ipc3000 smart firmware,
simatic ipc347e firmware,
simatic ipc427d firmware,
simatic ipc427e firmware,
simatic ipc477d firmware,
simatic ipc477e firmware,
simatic ipc477e pro firmware,
simatic ipc527g firmware,
simatic ipc547e firmware,
simatic ipc547g firmware,
simatic ipc627d firmware,
simatic ipc627e firmware,
simatic ipc647d firmware,
simatic ipc647e firmware,
simatic ipc677d firmware,
simatic ipc677e firmware,
simatic ipc827d firmware,
simatic ipc847d firmware,
simatic ipc847e firmware,
simatic itp1000 firmware,
simotion p320-4e firmware,
simotion p320-4s firmware,
threat intelligence exchange server,
threat intelligence exchange server 3.0.0,
ubuntu linux 12.04,
ubuntu linux 14.04,
ubuntu linux 16.04,
ubuntu linux 18.04,
ubuntu linux 19.10,
ubuntu linux 20.04,
xeon e-2124 -,
xeon e-2124g -,
xeon e-2126g -,
xeon e-2134 -,
xeon e-2136 -,
xeon e-2144g -,
xeon e-2146g -,
xeon e-2174g -,
xeon e-2176g -,
xeon e-2176m -,
xeon e-2184g -,
xeon e-2186g -,
xeon e-2186m -,
xeon e-2224 -,
xeon e-2224g -,
xeon e-2226g -,
xeon e-2226ge -,
xeon e-2234 -,
xeon e-2236 -,
xeon e-2244g -,
xeon e-2246g -,
xeon e-2254me -,
xeon e-2254ml -,
xeon e-2274g -,
xeon e-2276g -,
xeon e-2276m -,
xeon e-2276me -,
xeon e-2276ml -,
xeon e-2278g -,
xeon e-2278ge -,
xeon e-2278gel -,
xeon e-2284g -,
xeon e-2286m -,
xeon e-2288g -,
xeon e3-1105c -,
xeon e3-1105c v2 -,
xeon e3-1125c -,
xeon e3-1125c v2 -,
xeon e3-1220 v2 -,
xeon e3-1220 v3 -,
xeon e3-1220 v5 -,
xeon e3-1220 v6 -,
xeon e3-1220l v2 -,
xeon e3-1220l v3 -,
xeon e3-1221 v3 -,
xeon e3-1225 v2 -,
xeon e3-1225 v3 -,
xeon e3-1225 v5 -,
xeon e3-1225 v6 -,
xeon e3-1226 v3 -,
xeon e3-1230 v2 -,
xeon e3-1230 v3 -,
xeon e3-1230 v5 -,
xeon e3-1230 v6 -,
xeon e3-1230l v3 -,
xeon e3-1231 v3 -,
xeon e3-1235 v2 -,
xeon e3-1235l v5 -,
xeon e3-1240 v2 -,
xeon e3-1240 v3 -,
xeon e3-1240 v5 -,
xeon e3-1240 v6 -,
xeon e3-1240l v3 -,
xeon e3-1240l v5 -,
xeon e3-1241 v3 -,
xeon e3-1245 v2 -,
xeon e3-1245 v3 -,
xeon e3-1245 v5 -,
xeon e3-1245 v6 -,
xeon e3-1246 v3 -,
xeon e3-1258l v4 -,
xeon e3-1260l v5 -,
xeon e3-1265l -,
xeon e3-1265l v2 -,
xeon e3-1265l v4 -,
xeon e3-1268l v3 -,
xeon e3-1268l v5 -,
xeon e3-1270 -,
xeon e3-1270 v2 -,
xeon e3-1270 v5 -,
xeon e3-1270 v6 -,
xeon e3-1271 v3 -,
xeon e3-1275 v2 -,
xeon e3-1275 v3 -,
xeon e3-1275 v5 -,
xeon e3-1275 v6 -,
xeon e3-1275l v3 -,
xeon e3-1276 v3 -,
xeon e3-1278l v4 -,
xeon e3-1280 v2 -,
xeon e3-1280 v3 -,
xeon e3-1280 v5 -,
xeon e3-1280 v6 -,
xeon e3-1281 v3 -,
xeon e3-1285 v3 -,
xeon e3-1285 v4 -,
xeon e3-1285 v6 -,
xeon e3-1285l v3 -,
xeon e3-1286 v3 -,
xeon e3-1286l v3 -,
xeon e3-1290 v2 -,
xeon e3-1501l v6 -,
xeon e3-1501m v6 -,
xeon e3-1505l v5 -,
xeon e3-1505l v6 -,
xeon e3-1505m v5 -,
xeon e3-1505m v6 -,
xeon e3-1515m v5 -,
xeon e3-1535m v5 -,
xeon e3-1535m v6 -,
xeon e3-1545m v5 -,
xeon e3-1558l v5 -,
xeon e3-1565l v5 -,
xeon e3-1575m v5 -,
xeon e3-1578l v5 -,
xeon e3-1585 v5 -,
xeon e3-1585l v5 -

References

Rapid7

Low