VulnerabilityModified
CVE-2018-12207
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
MEDIUM 6.5EPSS 0.92%
Does this matter?
Lower severity and a low EPSS score (0.92%). Track it; it rarely justifies an emergency change on its own.
Description
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- EPSS
- 0.92% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- intel/core i3-10110u firmware · intel/core i3-10110y firmware · intel/core i3-1005g1 firmware · intel/core i3-9300t firmware · intel/core i3-9300 firmware · intel/core i3-9100 firmware · intel/core i3-9100t firmware · intel/core i3-9350k firmware · intel/core i3-9320 firmware · intel/core i3-8145u firmware · intel/core i3-8300 firmware · intel/core i3-8100t firmware · intel/core i3-8300t firmware · intel/core i3-8109u firmware · intel/core i3-8130u firmware · intel/core i3-8100 firmware · intel/core i3-8350k firmware · intel/core i3-7100 firmware · intel/core i3-7350k firmware · intel/core i3-7300t firmware · +40 more
- Source
- secure@intel.com
References
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.htmlMailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3916Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3936Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3941Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0026Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0028Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
- https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202003-56Third Party Advisory
- https://support.f5.com/csp/article/K17269881?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/4186-2/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4602Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00210.htmlVendor Advisory
- https://www.oracle.com/security-alerts/cpujul2020.htmlPatch, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00042.htmlMailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3916Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3936Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3941Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0026Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0028Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
- https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202003-56Third Party Advisory
- https://support.f5.com/csp/article/K17269881?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/4186-2/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4602Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.