[USN-3531-1] Intel Microcode update

Severity High

Affected Packages 2

CVEs 1

The system could be made to expose sensitive information.

It was discovered that microprocessors utilizing speculative execution
and branch prediction may allow unauthorized memory reads via sidechannel
attacks. This flaw is known as Spectre. A local attacker could use this to
expose sensitive information, including kernel memory. (CVE-2017-5715)

This update provides the microcode updates required for the corresponding
Linux kernel updates.

Package	Affected Version
pkg:deb/ubuntu/intel-microcode?distro=xenial	< 3.20180108.0~ubuntu16.04.2
pkg:deb/ubuntu/intel-microcode?distro=trusty	< 3.20180108.0~ubuntu14.04.2

ID

USN-3531-1

Severity

high

URL

https://ubuntu.com/security/notices/USN-3531-1

Published

2018-01-11T19:35:37
(6 years ago)

Modified

2018-01-11T19:35:37
(6 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:deb/ubuntu/intel-microcode?distro=xenial	ubuntu	intel-microcode	< 3.20180108.0~ubuntu16.04.2	xenial
Affected	pkg:deb/ubuntu/intel-microcode?distro=trusty	ubuntu	intel-microcode	< 3.20180108.0~ubuntu14.04.2	trusty

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date