ID de Prueba:	1.3.6.1.4.1.25623.1.0.883365
Categoría:	CentOS Local Security Checks
Título:	CentOS: Security Advisory for microcode_ctl (CESA-2021:3028)
Resumen:	The remote host is missing an update for the 'microcode_ctl'; package(s) announced via the CESA-2021:3028 advisory.
Descripción:	Summary: The remote host is missing an update for the 'microcode_ctl' package(s) announced via the CESA-2021:3028 advisory. Vulnerability Insight: The microcode_ctl packages provide microcode updates for Intel. Security Fix(es): * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543) * hw: Vector Register Data Sampling (CVE-2020-0548) * hw: L1D Cache Eviction Sampling (CVE-2020-0549) * hw: vt-d related privilege escalation (CVE-2020-24489) * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511) * hw: observable timing discrepancy in some Intel Processors (CVE-2020-24512) * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695) * hw: Vector Register Leakage-Active (CVE-2020-8696) * hw: Fast forward store predictor (CVE-2020-8698) Affected Software/OS: 'microcode_ctl' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-0543 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DT2VKDMQ3I37NBNJ256A2EXR7OJHXXKZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GRFC7UAPKAFFH5WX3AMDUBVHLKYQA2NZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQZMOSHLTBBIECENNXA6M7DN5FEED4KI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T5OUM24ZC43G4IDT3JUCIHJTSDXJSK6Y/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00320.html http://www.openwall.com/lists/oss-security/2020/07/14/5 SuSE Security Announcement: openSUSE-SU-2020:0818 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00025.html SuSE Security Announcement: openSUSE-SU-2020:0965 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html SuSE Security Announcement: openSUSE-SU-2020:0985 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html https://usn.ubuntu.com/4385-1/ https://usn.ubuntu.com/4387-1/ https://usn.ubuntu.com/4388-1/ https://usn.ubuntu.com/4389-1/ https://usn.ubuntu.com/4390-1/ https://usn.ubuntu.com/4391-1/ https://usn.ubuntu.com/4392-1/ https://usn.ubuntu.com/4393-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-0548 Debian Security Information: DSA-4701 (Google Search) https://www.debian.org/security/2020/dsa-4701 https://lists.debian.org/debian-lts-announce/2020/06/msg00019.html SuSE Security Announcement: openSUSE-SU-2020:0791 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html Common Vulnerability Exposure (CVE) ID: CVE-2020-0549 Common Vulnerability Exposure (CVE) ID: CVE-2020-8695 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AQ24MFBVH3HJW3PNRQBRY4YXKC7GA57W/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEM2FZWVE4FNGYNQU3WCBAWTZRBWDYUR/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389 https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html Common Vulnerability Exposure (CVE) ID: CVE-2020-8696 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381 Common Vulnerability Exposure (CVE) ID: CVE-2020-8698 Common Vulnerability Exposure (CVE) ID: CVE-2020-24489 Debian Security Information: DSA-4934 (Google Search) https://www.debian.org/security/2021/dsa-4934 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html Common Vulnerability Exposure (CVE) ID: CVE-2020-24511 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html Common Vulnerability Exposure (CVE) ID: CVE-2020-24512
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.