CVE-2019-11139

MEDIUM

Debian Linux - Improper Condition Check

Title source: rule
STIX 2.1

Description

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

References (7)

Core 7
Core References
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html
Mailing List, Third Party Advisory mailing-list x_refsource_bugtraq
https://seclists.org/bugtraq/2019/Dec/28
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html

Scores

CVSS v3 6.0
EPSS 0.0012
EPSS Percentile 30.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Details

CWE
CWE-754
Status published
Products (50)
debian/debian_linux 8.0
intel/xeon_3104_firmware
intel/xeon_3106_firmware
intel/xeon_4108_firmware
intel/xeon_4109t_firmware
intel/xeon_4110_firmware
intel/xeon_4112_firmware
intel/xeon_4114_firmware
intel/xeon_4114t_firmware
intel/xeon_4116_firmware
... and 40 more
Published Nov 14, 2019
Tracked Since Feb 18, 2026