[USN-3690-1] AMD Microcode update

Severity High

Affected Packages 3

CVEs 1

The system could be made to expose sensitive information.

Jann Horn discovered that microprocessors utilizing speculative execution
and branch prediction may allow unauthorized memory reads via sidechannel
attacks. This flaw is known as Spectre. A local attacker could use this to
expose sensitive information, including kernel memory.

This update provides the microcode updates for AMD 17H family
processors required for the corresponding Linux kernel updates.

Package	Affected Version
pkg:deb/ubuntu/amd64-microcode?distro=xenial	< 3.20180524.1~ubuntu0.16.04.1
pkg:deb/ubuntu/amd64-microcode?distro=trusty	< 3.20180524.1~ubuntu0.14.04.1
pkg:deb/ubuntu/amd64-microcode?distro=bionic	< 3.20180524.1~ubuntu0.18.04.1

ID

USN-3690-1

Severity

high

URL

https://ubuntu.com/security/notices/USN-3690-1

Published

2018-06-20T22:11:46
(6 years ago)

Modified

2018-06-20T22:11:46
(6 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/amd64-microcode?distro=xenial	ubuntu	amd64-microcode	< 3.20180524.1~ubuntu0.16.04.1	xenial
Affected	pkg:deb/ubuntu/amd64-microcode?distro=trusty	ubuntu	amd64-microcode	< 3.20180524.1~ubuntu0.14.04.1	trusty
Affected	pkg:deb/ubuntu/amd64-microcode?distro=bionic	ubuntu	amd64-microcode	< 3.20180524.1~ubuntu0.18.04.1	bionic

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date