USN-6485-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-6485-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6485-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/USN-6485-1

Related

Published

2023-11-17T00:12:04.838670Z

Modified

2023-11-17T00:12:04.838670Z

Summary

intel-microcode vulnerability

Details

Benoit Morgan, Paul Grosen, Thais Moreira Hamasaki, Ke Sun, Alyssa Milburn, Hisham Shafi, Nir Shlomovich, Tavis Ormandy, Daniel Moghimi, Josh Eads, Salman Qazi, Alexandra Sandulescu, Andy Nguyen, Eduardo Vela, Doug Kwan, and Kostik Shtoyk discovered that some Intel(R) Processors did not properly handle certain sequences of processor instructions. A local attacker could possibly use this to cause a core hang (resulting in a denial of service), gain access to sensitive information or possibly escalate their privileges.

References

Affected packages

Ubuntu:Pro:16.04:LTS / intel-microcode

Package

Name: intel-microcode
Purl: pkg:deb/ubuntu/intel-microcode?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20231114.0ubuntu0.16.04.1+esm1

Affected versions

3.*

3.20150121.1

3.20151106.1

3.20170707.1~ubuntu16.04.0

3.20180108.0~ubuntu16.04.2

3.20180108.0+really20170707ubuntu16.04.1

3.20180312.0~ubuntu16.04.1

3.20180425.1~ubuntu0.16.04.1

3.20180425.1~ubuntu0.16.04.2

3.20180807a.0ubuntu0.16.04.1

3.20190514.0ubuntu0.16.04.1

3.20190514.0ubuntu0.16.04.2

3.20190618.0ubuntu0.16.04.1

3.20191112-0ubuntu0.16.04.2

3.20191115.1ubuntu0.16.04.1

3.20191115.1ubuntu0.16.04.2

3.20200609.0ubuntu0.16.04.0

3.20200609.0ubuntu0.16.04.1

3.20201110.0ubuntu0.16.04.1

3.20201110.0ubuntu0.16.04.2

3.20210216.0ubuntu0.16.04.1

3.20210608.0ubuntu0.16.04.1+esm1

3.20220510.0ubuntu0.16.04.1+esm1

3.20230214.0ubuntu0.16.04.1+esm1

3.20230808.0ubuntu0.16.04.1+esm1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "3.20231114.0ubuntu0.16.04.1+esm1",
            "binary_name": "intel-microcode"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / intel-microcode

Package

Name: intel-microcode
Purl: pkg:deb/ubuntu/intel-microcode?arch=src?distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20231114.0ubuntu0.18.04.1+esm1

Affected versions

3.*

3.20170707.1

3.20171117.1

3.20180108.1

3.20180108.1+really20171117.1

3.20180312.0~ubuntu18.04.1

3.20180425.1~ubuntu0.18.04.1

3.20180425.1~ubuntu0.18.04.2

3.20180807a.0ubuntu0.18.04.1

3.20190514.0ubuntu0.18.04.2

3.20190514.0ubuntu0.18.04.3

3.20190618.0ubuntu0.18.04.1

3.20191112-0ubuntu0.18.04.2

3.20191115.1ubuntu0.18.04.1

3.20191115.1ubuntu0.18.04.2

3.20200609.0ubuntu0.18.04.0

3.20200609.0ubuntu0.18.04.1

3.20201110.0ubuntu0.18.04.1

3.20201110.0ubuntu0.18.04.2

3.20210216.0ubuntu0.18.04.1

3.20210608.0ubuntu0.18.04.1

3.20220510.0ubuntu0.18.04.1

3.20220809.0ubuntu0.18.04.1

3.20230214.0ubuntu0.18.04.1

3.20230808.0ubuntu0.18.04.1+esm1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "3.20231114.0ubuntu0.18.04.1+esm1",
            "binary_name": "intel-microcode"
        }
    ]
}

Ubuntu:20.04:LTS / intel-microcode

Package

Name: intel-microcode
Purl: pkg:deb/ubuntu/intel-microcode?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20231114.0ubuntu0.20.04.1

Affected versions

3.*

3.20190918.1ubuntu1

3.20191115.1ubuntu1

3.20191115.1ubuntu2

3.20191115.1ubuntu3

3.20200609.0ubuntu0.20.04.0

3.20200609.0ubuntu0.20.04.1

3.20200609.0ubuntu0.20.04.2

3.20201110.0ubuntu0.20.04.1

3.20201110.0ubuntu0.20.04.2

3.20210216.0ubuntu0.20.04.1

3.20210608.0ubuntu0.20.04.1

3.20220510.0ubuntu0.20.04.1

3.20220809.0ubuntu0.20.04.1

3.20230214.0ubuntu0.20.04.1

3.20230808.0ubuntu0.20.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "3.20231114.0ubuntu0.20.04.1",
            "binary_name": "intel-microcode"
        }
    ]
}

Ubuntu:22.04:LTS / intel-microcode

Package

Name: intel-microcode
Purl: pkg:deb/ubuntu/intel-microcode?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20231114.0ubuntu0.22.04.1

Affected versions

3.*

3.20210608.2ubuntu1

3.20220510.0ubuntu0.22.04.1

3.20220809.0ubuntu0.22.04.1

3.20230214.0ubuntu0.22.04.1

3.20230808.0ubuntu0.22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "3.20231114.0ubuntu0.22.04.1",
            "binary_name": "intel-microcode"
        }
    ]
}

Ubuntu:23.10 / intel-microcode

Package

Name: intel-microcode
Purl: pkg:deb/ubuntu/intel-microcode?arch=src?distro=mantic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20231114.0ubuntu0.23.10.1

Affected versions

3.*

3.20230214.0ubuntu1

3.20230512.1

3.20230808.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "3.20231114.0ubuntu0.23.10.1",
            "binary_name": "intel-microcode"
        }
    ]
}