Red Hat Enterprise Linux Server 7.7 update for Intel CPU microcode
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 4 |
| CVE-ID | CVE-2020-24489 CVE-2020-24511 CVE-2020-24512 CVE-2020-24513 |
| CWE-ID | CWE-459 CWE-200 CWE-203 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
microcode_ctl (Red Hat package) Operating systems & Components / Operating system package or component Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions Operating systems & Components / Operating system package or component Red Hat Enterprise Linux EUS Compute Node Operating systems & Components / Operating system Red Hat Enterprise Linux for x86_64 - Extended Update Support Operating systems & Components / Operating system Red Hat Enterprise Linux Server - TUS Operating systems & Components / Operating system Red Hat Enterprise Linux Server - AUS Operating systems & Components / Operating system |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 4 vulnerabilities.
1) Incomplete cleanup
EUVDB-ID: #VU54191
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-24489
CWE-ID:
CWE-459 - Incomplete cleanup
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to incomplete cleanup, which leads to security restrictions bypass and privilege escalation.
MitigationInstall updates from vendor's website.
microcode_ctl (Red Hat package): 2.1-53.3.el7_7 - 2.1-53.15.el7_7
Red Hat Enterprise Linux EUS Compute Node: 7.7
Red Hat Enterprise Linux for x86_64 - Extended Update Support: 7.7
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions: 7.7
Red Hat Enterprise Linux Server - TUS: 7.7
Red Hat Enterprise Linux Server - AUS: 7.7
CPE2.3- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.15.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.3.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.13.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_eus_compute_node:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_x86_64_-_extended_update_support:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:2304
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Information disclosure
EUVDB-ID: #VU54203
Risk: Low
CVSSv3.1: 4.9 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-24511
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to improper isolation of shared resources. A local user can gain unauthorized access to sensitive information on the system.
MitigationInstall updates from vendor's website.
microcode_ctl (Red Hat package): 2.1-53.3.el7_7 - 2.1-53.15.el7_7
Red Hat Enterprise Linux EUS Compute Node: 7.7
Red Hat Enterprise Linux for x86_64 - Extended Update Support: 7.7
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions: 7.7
Red Hat Enterprise Linux Server - TUS: 7.7
Red Hat Enterprise Linux Server - AUS: 7.7
CPE2.3- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.15.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.3.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.13.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_eus_compute_node:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_x86_64_-_extended_update_support:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:2304
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Observable discrepancy
EUVDB-ID: #VU54204
Risk: Low
CVSSv3.1: 2.5 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-24512
CWE-ID:
CWE-203 - Observable discrepancy
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to observable timing discrepancy. A local user can gain unauthorized access to sensitive information on the system.
MitigationInstall updates from vendor's website.
microcode_ctl (Red Hat package): 2.1-53.3.el7_7 - 2.1-53.15.el7_7
Red Hat Enterprise Linux EUS Compute Node: 7.7
Red Hat Enterprise Linux for x86_64 - Extended Update Support: 7.7
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions: 7.7
Red Hat Enterprise Linux Server - TUS: 7.7
Red Hat Enterprise Linux Server - AUS: 7.7
CPE2.3- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.15.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.3.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.13.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_eus_compute_node:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_x86_64_-_extended_update_support:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:2304
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Information disclosure
EUVDB-ID: #VU54220
Risk: Low
CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-24513
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user o gain access to potentially sensitive information.
The vulnerability exists due to domain-bypass transient execution issue. A local user can gain unauthorized access to sensitive information on the system.
MitigationInstall updates from vendor's website.
microcode_ctl (Red Hat package): 2.1-53.3.el7_7 - 2.1-53.15.el7_7
Red Hat Enterprise Linux EUS Compute Node: 7.7
Red Hat Enterprise Linux for x86_64 - Extended Update Support: 7.7
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions: 7.7
Red Hat Enterprise Linux Server - TUS: 7.7
Red Hat Enterprise Linux Server - AUS: 7.7
CPE2.3- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.15.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.3.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:microcode_ctl_redhat_package:2.1-53.13.el7_7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_eus_compute_node:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_x86_64_-_extended_update_support:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:7.7:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:2304
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
