Test ID:	1.3.6.1.4.1.25623.1.1.10.2019.0207
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2019-0207)
Summary:	The remote host is missing an update for the 'microcode' package(s) announced via the MGASA-2019-0207 advisory.
Description:	Summary: The remote host is missing an update for the 'microcode' package(s) announced via the MGASA-2019-0207 advisory. Vulnerability Insight: Secure Encrypted Virtualization (SEV) on Advanced Micro Devices(AMD) Platform Security Processor (PSP, aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation. This update provides Amd SEV Firmware to 0.17 build 22 (CVE-2019-9836). It also updates the Intel Microcode for the following: * SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X * SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X Affected Software/OS: 'microcode' package(s) on Mageia 6, Mageia 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-9836 http://packetstormsecurity.com/files/153436/AMD-Secure-Encrypted-Virtualization-SEV-Key-Recovery.html https://seclists.org/fulldisclosure/2019/Jun/46 SuSE Security Announcement: openSUSE-SU-2019:1770 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00032.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.