CVE-2019-11139

Published: Nov 14, 2019Modified: Nov 21, 2024

6.0

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Exploitability: 1.5 / Impact: 4.0

Source: NVD

Description

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Affected (60)

Products: Debian: Debian Linux · Opensuse: Leap · Intel: Xeon 8153 Firmware, Xeon 8156 Firmware, Xeon 8158 Firmware, Xeon 8160 Firmware, Xeon 8160f Firmware, Xeon 8160m Firmware, Xeon 8160t Firmware, Xeon 8164 Firmware, Xeon 8168 Firmware, Xeon 8170 Firmware, Xeon 8170m Firmware, Xeon 8176 Firmware, Xeon 8176f Firmware, Xeon 8176m Firmware, Xeon 8180 Firmware, Xeon 8180m Firmware, Xeon 5115 Firmware, Xeon 5118 Firmware, Xeon 5119t Firmware, Xeon 5120 Firmware, Xeon 5120t Firmware, Xeon 5122 Firmware, Xeon 6126 Firmware, Xeon 6126f Firmware, Xeon 6126t Firmware, Xeon 6128 Firmware, Xeon 6130 Firmware, Xeon 6130f Firmware, Xeon 6130t Firmware, Xeon 6132 Firmware, Xeon 6134 Firmware, Xeon 6134m Firmware, Xeon 6136 Firmware, Xeon 6138 Firmware, Xeon 6138f Firmware, Xeon 6138t Firmware, Xeon 6140 Firmware, Xeon 6140m Firmware, Xeon 6142 Firmware, Xeon 6142f Firmware, Xeon 6144 Firmware, Xeon 6146 Firmware, Xeon 6148 Firmware, Xeon 6148f Firmware, Xeon 6150 Firmware, Xeon 6152 Firmware, Xeon 6154 Firmware, Xeon 4108 Firmware, Xeon 4109t Firmware, Xeon 4110 Firmware, Xeon 4112 Firmware, Xeon 4114 Firmware, Xeon 4114t Firmware, Xeon 4116 Firmware, Xeon 4116t Firmware, Xeon 3104 Firmware, Xeon 3106 Firmware

1 product

1 product

57 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Opensuse Leap	Version 15.0
Opensuse Leap	Version 15.1

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8153 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8153	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8156 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8156	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8158 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8158	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8160 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8160	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8160f Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8160f	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8160m Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8160m	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8160t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8160t	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8164 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8164	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8168 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8168	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8170 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8170	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8170m Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8170m	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8176 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8176	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8176f Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8176f	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8176m Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8176m	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8180 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8180	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 8180m Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 8180m	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 5115 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 5115	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 5118 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 5118	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 5119t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 5119t	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 5120 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 5120	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 5120t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 5120t	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 5122 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 5122	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6126 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6126	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6126f Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6126f	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6126t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6126t	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6128 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6128	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6130 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6130	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6130f Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6130f	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6130t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6130t	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6132 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6132	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6134 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6134	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6134m Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6134m	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6136 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6136	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6138 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6138	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6138f Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6138f	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6138t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6138t	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6140 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6140	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6140m Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6140m	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6142 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6142	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6142f Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6142f	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6144 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6144	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6146 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6146	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6148 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6148	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6148f Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6148f	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6150 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6150	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6152 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6152	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 6154 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 6154	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4108 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4108	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4109t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4109t	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4110 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4110	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4112 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4112	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4114 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4114	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4114t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4114t	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4116 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4116	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 4116t Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 4116t	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 3104 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 3104	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon 3106 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon 3106	All versions

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (14)

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html

Source: secure@intel.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html

Source: secure@intel.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html

Source: secure@intel.com

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Dec/28

Source: secure@intel.com

Mailing ListThird Party Advisory

https://support.f5.com/csp/article/K42433061?utm_source=f5support&amp%3Butm_medium=RSS

Source: secure@intel.com

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03969en_us

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html

Source: secure@intel.com

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Dec/28

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://support.f5.com/csp/article/K42433061?utm_source=f5support&amp%3Butm_medium=RSS

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03969en_us

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.