CVE-2019-11139

Public on 2019-11-14
Modified on 2019-11-16
Description
Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.
Severity
Medium
CVSS v3 Base Score
5.8
See breakdown

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 2 microcode_ctl 2019-11-14 20:01 ALAS2-2019-1364
Amazon Linux 2 kernel 2019-11-14 20:01 ALAS2-2019-1364
Amazon Linux 1 microcode_ctl 2019-11-14 20:06 ALAS-2019-1318
Amazon Linux 1 kernel 2019-11-14 20:06 ALAS-2019-1318

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.8 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H
NVD CVSSv2 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P
NVD CVSSv3 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H