CVE-2021-0086

Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

CVSS v3 6.5 MEDIUM
CVSS v2.0 2.1 LOW

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

2.1^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.openwall.com/lists/oss-security/2021/06/08/7	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/06/09/2	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/06/10/1	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html	Vendor Advisory
http://www.openwall.com/lists/oss-security/2021/06/08/7	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/06/09/2	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/06/10/1	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:intel:brand_verification_tool:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:33:::::::*
	cpe:2.3:o:fedoraproject:fedora:34:::::::*

Configuration 3 (hide)

AND

cpe:2.3:o:intel:pentium_processors_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:pentium_processors:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:intel:celeron_processors_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:celeron_processors:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:intel:xeon_processors_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_processors:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:intel:core_processors_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:core_processors:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:intel:itanium_processors_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:itanium_processors:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:41

Type	Values Removed	Values Added
References	~~() http://www.openwall.com/lists/oss-security/2021/06/08/7 - Mailing List, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2021/06/08/7 - Mailing List, Third Party Advisory
References	~~() http://www.openwall.com/lists/oss-security/2021/06/09/2 - Mailing List, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2021/06/09/2 - Mailing List, Third Party Advisory
References	~~() http://www.openwall.com/lists/oss-security/2021/06/10/1 - Mailing List, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2021/06/10/1 - Mailing List, Third Party Advisory
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ -~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ -
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ -~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ -
References	~~() https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html - Vendor Advisory~~	() https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html - Vendor Advisory
References	~~() https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html - Vendor Advisory~~	() https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html - Vendor Advisory

01 Jul 2021, 16:57

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 2.1 v3 : 6.5
CWE		CWE-203
CPE		cpe:2.3:h:intel:xeon_processors:-:::::::* cpe:2.3:h:intel:core_processors:-:::::::* cpe:2.3:o:intel:xeon_processors_firmware:-:::::::* cpe:2.3:o:intel:core_processors_firmware:-:::::::* cpe:2.3:h:intel:celeron_processors:-:::::::* cpe:2.3:h:intel:pentium_processors:-:::::::* cpe:2.3:o:intel:itanium_processors_firmware:-:::::::* cpe:2.3:h:intel:itanium_processors:-:::::::* cpe:2.3:o:intel:pentium_processors_firmware:-:::::::* cpe:2.3:o:intel:celeron_processors_firmware:-:::::::* cpe:2.3:a:intel:brand_verification_tool:::::::: cpe:2.3:o:fedoraproject:fedora:34:::::::* cpe:2.3:o:fedoraproject:fedora:33:::::::*
References	~~(MLIST) http://www.openwall.com/lists/oss-security/2021/06/08/7 -~~	(MLIST) http://www.openwall.com/lists/oss-security/2021/06/08/7 - Mailing List, Third Party Advisory
References	~~(MLIST) http://www.openwall.com/lists/oss-security/2021/06/09/2 -~~	(MLIST) http://www.openwall.com/lists/oss-security/2021/06/09/2 - Mailing List, Third Party Advisory
References	~~(CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html -~~	(CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html - Vendor Advisory
References	~~(MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html -~~	(MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html - Vendor Advisory
References	~~(MLIST) http://www.openwall.com/lists/oss-security/2021/06/10/1 -~~	(MLIST) http://www.openwall.com/lists/oss-security/2021/06/10/1 - Mailing List, Third Party Advisory
References	~~(FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ -~~	(FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ - Mailing List, Third Party Advisory
References	~~(FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ -~~	(FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ - Mailing List, Third Party Advisory

17 Jun 2021, 12:15

Type	Values Removed	Values Added
References		(MLIST) http://www.openwall.com/lists/oss-security/2021/06/08/7 - (MLIST) http://www.openwall.com/lists/oss-security/2021/06/09/2 - (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html -
Summary	Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access.	Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

17 Jun 2021, 03:15

Type	Values Removed	Values Added
References		(FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ -

16 Jun 2021, 23:15

Type	Values Removed	Values Added
References		(FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ -

10 Jun 2021, 12:15

Type	Values Removed	Values Added
References		(MLIST) http://www.openwall.com/lists/oss-security/2021/06/10/1 -

09 Jun 2021, 20:19

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-06-09 20:15

Updated : 2024-11-21 05:41

NVD link : CVE-2021-0086

Mitre link : CVE-2021-0086

CVE.ORG link : CVE-2021-0086

JSON object : View

Products Affected

intel

pentium_processors_firmware
celeron_processors_firmware
celeron_processors
itanium_processors
xeon_processors
core_processors_firmware
core_processors
itanium_processors_firmware
xeon_processors_firmware
brand_verification_tool
pentium_processors

fedoraproject

fedora

CWE

CWE-203

Observable Discrepancy

{"id": "CVE-2021-0086", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 2.0}]}, "published": "2021-06-09T20:15:08.513", "references": [{"url": "http://www.openwall.com/lists/oss-security/2021/06/08/7", "tags": ["Mailing List", "Third Party Advisory"], "source": "secure@intel.com"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/09/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "secure@intel.com"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/10/1", "tags": ["Mailing List", "Third Party Advisory"], "source": "secure@intel.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/", "source": "secure@intel.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/", "source": "secure@intel.com"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/08/7", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/09/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2021/06/10/1", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-203"}]}], "descriptions": [{"lang": "en", "value": "Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access."}, {"lang": "es", "value": "La discrepancia de respuesta observable en las operaciones de punto flotante para algunos procesadores Intel(R) puede permitir que un usuario autorizado permita potencialmente la divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso local"}], "lastModified": "2024-11-21T05:41:49.143", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:brand_verification_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB1CD798-D77D-4837-94D2-061063B8EF68", "versionEndExcluding": "11.0.0.1225"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:pentium_processors_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DF5960F-C6F8-4618-ACC5-393923DE7309"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:pentium_processors:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "56FFCEC6-27E2-49D2-96D7-8550F3E0A131"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:celeron_processors_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABCFC60F-84E5-4196-ADDA-59970E2E6213"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:celeron_processors:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E17EE3B1-B545-4E8C-9758-7BC451796721"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:xeon_processors_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBCC8CD3-F2D7-4271-9E09-FF3E7DEA8FF2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:xeon_processors:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0C91911E-C3E4-4816-9FAE-6B3FFD41CE8F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:core_processors_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2762E765-9E1A-4500-A4E8-D11AC6393E84"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:core_processors:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7B70FC84-662E-4FB3-9DC8-B419E25C20B6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:itanium_processors_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D2A66EF-A3DF-4A52-BA95-372644E1D6C9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:itanium_processors:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5A4E66A3-1274-4BB1-8547-7EAF298BAE67"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secure@intel.com"}

6.5 /10

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

2.1 /10

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

JSON object

Attach tags to CVE-2021-0086

6.5^/10

2.1^/10

Attach tags to `CVE-2021-0086`