Critical Vulnerability in Intel Microcode: Denial of Service Risk for Intel Xeon Processors
Summary
UBUNTU-CVE-2019-11139: Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access. Affects intel-microcode versions < 3.20191112-0ubuntu0.14.04.2. Fixed in 3.20191112-0ubuntu0.14.04.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Intel Microcode is a crucial component that provides low-level control over Intel processors, including Xeon Scalable Processors. It is responsible for implementing processor features and fixes, ensuring optimal performance and security. This package is essential for maintaining system stability and security, particularly in server environments where Intel Xeon processors are commonly used.
Vulnerability Detail
The vulnerability identified as CVE-2019-11139 arises from improper conditions check in the voltage modulation interface for some Intel Xeon Scalable Processors. This flaw may allow a privileged user to potentially enable denial of service via local access, which could lead to system instability or crashes. The vulnerability has a CVSS score of 6.0, indicating a medium severity level, and poses a significant risk to systems relying on affected microcode versions.
How To Fix
Minimum fixed version
3.20191112-0ubuntu0.14.04.2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade intel-microcodeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected systems to prevent unauthorized privileged access until the patch is applied. Additionally, monitoring system logs for unusual activity may help mitigate the risk until the update is implemented.
Conclusion
The CVE-2019-11139 vulnerability poses a significant risk to systems using Intel Microcode on Xeon Scalable Processors. Users are strongly advised to update their packages to the patched versions available for their respective Ubuntu distributions to ensure system security and stability.
See every vulnerability recorded for intel-microcode →
FAQ
CVE-2019-11139 is a vulnerability in the Intel Microcode that affects Intel Xeon Scalable Processors, allowing potential denial of service via local access.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability can lead to system instability or crashes, particularly in environments that rely on Intel Xeon processors, potentially affecting critical services.
Yes, patched versions of the Intel Microcode are available for various Ubuntu distributions. Users should update to the latest version to mitigate the risk.
If immediate patching is not possible, limit access to the affected systems and monitor for any unusual activity as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for intel-microcode.
