CVE-2018-12207
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
Does this matter?
Lower severity and a low EPSS score (0.92%). Track it; it rarely justifies an emergency change on its own.
Description
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- EPSS
- 0.92% probability · 60th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- intel/core i3-10110u firmware · intel/core i3-10110y firmware · intel/core i3-1005g1 firmware · intel/core i3-9300t firmware · intel/core i3-9300 firmware · intel/core i3-9100 firmware · intel/core i3-9100t firmware · intel/core i3-9350k firmware · intel/core i3-9320 firmware · intel/core i3-8145u firmware · intel/core i3-8300 firmware · intel/core i3-8100t firmware · intel/core i3-8300t firmware · intel/core i3-8109u firmware · intel/core i3-8130u firmware · intel/core i3-8100 firmware · intel/core i3-8350k firmware · intel/core i3-7100 firmware · intel/core i3-7350k firmware · intel/core i3-7300t firmware · +40 more
- Source
- secure@intel.com
EPSS 0.9% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.htmlMailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3916Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3936Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3941Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0026Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0028Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
- https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202003-56Third Party Advisory
- https://support.f5.com/csp/article/K17269881?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/4186-2/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4602Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00210.htmlVendor Advisory
- https://www.oracle.com/security-alerts/cpujul2020.htmlPatch, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.htmlMailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3916Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3936Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3941Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0026Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0028Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
- https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202003-56Third Party Advisory
- https://support.f5.com/csp/article/K17269881?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/4186-2/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4602Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.