ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2021.0256
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2021-0256)
Resumen:	The remote host is missing an update for the 'microcode' package(s) announced via the MGASA-2021-0256 advisory.
Descripción:	Summary: The remote host is missing an update for the 'microcode' package(s) announced via the MGASA-2021-0256 advisory. Vulnerability Insight: Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access (CVE-2020-24489). Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2020-24511). Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2020-24513). For more info about this update, see the refenced links. Affected Software/OS: 'microcode' package(s) on Mageia 7, Mageia 8. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-24489 Debian Security Information: DSA-4934 (Google Search) https://www.debian.org/security/2021/dsa-4934 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html Common Vulnerability Exposure (CVE) ID: CVE-2020-24511 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html Common Vulnerability Exposure (CVE) ID: CVE-2020-24513 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.