CVE-2019-11091
Medium
Description
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
SeverityMedium
CVSS5.6
Exploit probability—
Product
Intel Microarchitectural Data Sampling Uncacheable Memory Firmware
PublishedMay 30, 2019
First seenMay 30, 2019
How to fix
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/
- access.redhat.com/errata/RHSA-2019:1455
- usn.ubuntu.com/3977-3/
- freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc
- access.redhat.com/errata/RHSA-2019:2553
- debian.org/security/2020/dsa-4602
- security.gentoo.org/glsa/202003-56
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel microarchitectural_data_sampling_uncacheable_memory_firmware | No range specified | — |
| fedoraproject fedora | 29 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.