2019.2 IPU – Intel(R) Xeon(R) Scalable Processors Voltage Setting Modulation

CVE-2019-11139

MEDIUM 6.0

En bref

Source: NVD
EPSS: EPSS 0.36 % · centile 29 (2026-10-31)
État: PUBLISHED
Publiée: 2019-11-14 18:18 UTC
Mise à jour: 2024-08-04 22:48 UTC
Attribuée par: intel
Statut NVD: Modified

Rechercher sur…

Description

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Faiblesses (CWE)

CWE-754 — Vérification incorrecte de conditions inhabituelles ou exceptionnelles

Références

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	MEDIUM 6.0	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)
CVSS 2.0	LOW 2.1	AV:L/AC:L/Au:N/C:N/I:N/A:P	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2019-2843
GCVE · GCVE-0-2019-11139

Avis du CERT-FR

CERTFR-2020-AVI-618 — Multiples vulnérabilités dans les produits Stormshield · cert.ssi.gouv.fr
CERTFR-2019-AVI-563 — Multiples vulnérabilités dans les microgiciels Intel · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8153_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8156_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8158_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8160_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8160f_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8160m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8160t_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8164_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8168_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8170_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8170m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8176_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8176f_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8176m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8180_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_8180m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_5115_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_5118_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_5119t_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_5120_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_5120t_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_5122_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6126_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6126f_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6126t_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6128_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6130_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6130f_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6130t_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6132_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6134_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6134m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6136_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6138_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6138f_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6138t_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_6140_firmware:-:*:*:*:*:*:*:*
+20 autres

Produits affectés

Produit	Versions
2019.2 IPU – Intel(R) Xeon(R) Scalable Processors Voltage Setting Modulation	affected See provided reference

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 2019.2 IPU – Intel(R) Xeon(R) Scalable Processors Voltage Setting Modulation