VULN/vuln-ubuntu
1
0 Fork 0
Code Pull Requests Actions Activity
Files
b11ea68500bc027250f00a6270f6fc7f2eb21e6e
vuln-ubuntu/data/osv/usn/USN-6485-1.json
T

313 lines
9.2 KiB
JSON
Raw Blame History

{
"schema_version": "1.7.0",
"id": "USN-6485-1",
"summary": "intel-microcode vulnerability",
"details": "Benoit Morgan, Paul Grosen, Thais Moreira Hamasaki, Ke Sun, Alyssa Milburn,\nHisham Shafi, Nir Shlomovich, Tavis Ormandy, Daniel Moghimi, Josh Eads, Salman\nQazi, Alexandra Sandulescu, Andy Nguyen, Eduardo Vela, Doug Kwan, and Kostik\nShtoyk discovered that some Intel(R) Processors did not properly handle certain\nsequences of processor instructions. A local attacker could possibly use this to\ncause a core hang (resulting in a denial of service), gain access to sensitive\ninformation or possibly escalate their privileges.\n",
"aliases": [],
"upstream": [
"UBUNTU-CVE-2023-23583"
],
"related": [],
"published": "2023-11-17T00:12:04Z",
"modified": "2026-06-25T10:46:17Z",
"affected": [
{
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "intel-microcode",
"purl": "pkg:deb/ubuntu/intel-microcode@3.20231114.0ubuntu0.16.04.1+esm1?arch=source&distro=esm-infra/xenial"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20231114.0ubuntu0.16.04.1+esm1"
}
]
}
],
"versions": [
"3.20150121.1",
"3.20151106.1",
"3.20170707.1~ubuntu16.04.0",
"3.20180108.0~ubuntu16.04.2",
"3.20180108.0+really20170707ubuntu16.04.1",
"3.20180312.0~ubuntu16.04.1",
"3.20180425.1~ubuntu0.16.04.1",
"3.20180425.1~ubuntu0.16.04.2",
"3.20180807a.0ubuntu0.16.04.1",
"3.20190514.0ubuntu0.16.04.1",
"3.20190514.0ubuntu0.16.04.2",
"3.20190618.0ubuntu0.16.04.1",
"3.20191112-0ubuntu0.16.04.2",
"3.20191115.1ubuntu0.16.04.1",
"3.20191115.1ubuntu0.16.04.2",
"3.20200609.0ubuntu0.16.04.0",
"3.20200609.0ubuntu0.16.04.1",
"3.20201110.0ubuntu0.16.04.1",
"3.20201110.0ubuntu0.16.04.2",
"3.20210216.0ubuntu0.16.04.1",
"3.20210608.0ubuntu0.16.04.1+esm1",
"3.20220510.0ubuntu0.16.04.1+esm1",
"3.20230214.0ubuntu0.16.04.1+esm1",
"3.20230808.0ubuntu0.16.04.1+esm1"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "intel-microcode",
"binary_version": "3.20231114.0ubuntu0.16.04.1+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"id": "CVE-2023-23583",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "intel-microcode",
"purl": "pkg:deb/ubuntu/intel-microcode@3.20231114.0ubuntu0.18.04.1+esm1?arch=source&distro=esm-infra/bionic"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20231114.0ubuntu0.18.04.1+esm1"
}
]
}
],
"versions": [
"3.20170707.1",
"3.20171117.1",
"3.20180108.1",
"3.20180108.1+really20171117.1",
"3.20180312.0~ubuntu18.04.1",
"3.20180425.1~ubuntu0.18.04.1",
"3.20180425.1~ubuntu0.18.04.2",
"3.20180807a.0ubuntu0.18.04.1",
"3.20190514.0ubuntu0.18.04.2",
"3.20190514.0ubuntu0.18.04.3",
"3.20190618.0ubuntu0.18.04.1",
"3.20191112-0ubuntu0.18.04.2",
"3.20191115.1ubuntu0.18.04.1",
"3.20191115.1ubuntu0.18.04.2",
"3.20200609.0ubuntu0.18.04.0",
"3.20200609.0ubuntu0.18.04.1",
"3.20201110.0ubuntu0.18.04.1",
"3.20201110.0ubuntu0.18.04.2",
"3.20210216.0ubuntu0.18.04.1",
"3.20210608.0ubuntu0.18.04.1",
"3.20220510.0ubuntu0.18.04.1",
"3.20220809.0ubuntu0.18.04.1",
"3.20230214.0ubuntu0.18.04.1",
"3.20230808.0ubuntu0.18.04.1+esm1"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "intel-microcode",
"binary_version": "3.20231114.0ubuntu0.18.04.1+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"cves": [
{
"id": "CVE-2023-23583",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "intel-microcode",
"purl": "pkg:deb/ubuntu/intel-microcode@3.20231114.0ubuntu0.20.04.1?arch=source&distro=focal"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20231114.0ubuntu0.20.04.1"
}
]
}
],
"versions": [
"3.20190918.1ubuntu1",
"3.20191115.1ubuntu1",
"3.20191115.1ubuntu2",
"3.20191115.1ubuntu3",
"3.20200609.0ubuntu0.20.04.0",
"3.20200609.0ubuntu0.20.04.1",
"3.20200609.0ubuntu0.20.04.2",
"3.20201110.0ubuntu0.20.04.1",
"3.20201110.0ubuntu0.20.04.2",
"3.20210216.0ubuntu0.20.04.1",
"3.20210608.0ubuntu0.20.04.1",
"3.20220510.0ubuntu0.20.04.1",
"3.20220809.0ubuntu0.20.04.1",
"3.20230214.0ubuntu0.20.04.1",
"3.20230808.0ubuntu0.20.04.1"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "intel-microcode",
"binary_version": "3.20231114.0ubuntu0.20.04.1"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:20.04:LTS",
"cves": [
{
"id": "CVE-2023-23583",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "intel-microcode",
"purl": "pkg:deb/ubuntu/intel-microcode@3.20231114.0ubuntu0.22.04.1?arch=source&distro=jammy"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.20231114.0ubuntu0.22.04.1"
}
]
}
],
"versions": [
"3.20210608.2ubuntu1",
"3.20220510.0ubuntu0.22.04.1",
"3.20220809.0ubuntu0.22.04.1",
"3.20230214.0ubuntu0.22.04.1",
"3.20230808.0ubuntu0.22.04.1"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "intel-microcode",
"binary_version": "3.20231114.0ubuntu0.22.04.1"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"id": "CVE-2023-23583",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-6485-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-23583"
}
]
}
View Git Blame Copy Permalink