CVE-2021-0086

Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Configurations

Configuration 1 (hide)

cpe:2.3:a:intel:brand_verification_tool:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:intel:pentium_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:pentium_processors:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:intel:celeron_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:celeron_processors:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:intel:xeon_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_processors:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:intel:core_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_processors:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:intel:itanium_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:itanium_processors:-:*:*:*:*:*:*:*

History

07 Nov 2023, 03:27

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/', 'name': 'FEDORA-2021-41d4347447', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/', 'name': 'FEDORA-2021-993693c914', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ -

01 Jul 2021, 16:57

Type Values Removed Values Added
References (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html - (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html - Vendor Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2021/06/10/1 - (MLIST) http://www.openwall.com/lists/oss-security/2021/06/10/1 - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ - Mailing List, Third Party Advisory
References (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html - (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html - Vendor Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2021/06/08/7 - (MLIST) http://www.openwall.com/lists/oss-security/2021/06/08/7 - Mailing List, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2021/06/09/2 - (MLIST) http://www.openwall.com/lists/oss-security/2021/06/09/2 - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ - Mailing List, Third Party Advisory
CPE cpe:2.3:a:intel:brand_verification_tool:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:pentium_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:pentium_processors:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:itanium_processors:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:celeron_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:core_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_processors:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_processors:-:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:h:intel:celeron_processors:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:itanium_processors_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:xeon_processors_firmware:-:*:*:*:*:*:*:*
CWE CWE-203
CVSS v2 : unknown
v3 : unknown
v2 : 2.1
v3 : 6.5

17 Jun 2021, 12:15

Type Values Removed Values Added
Summary Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access. Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
References
  • (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html -
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/06/09/2 -
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/06/08/7 -

17 Jun 2021, 03:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ -

16 Jun 2021, 23:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ -

10 Jun 2021, 12:15

Type Values Removed Values Added
References
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/06/10/1 -

09 Jun 2021, 20:19

Type Values Removed Values Added
New CVE

Information

Published : 2021-06-09 20:15

Updated : 2023-12-10 13:55


NVD link : CVE-2021-0086

Mitre link : CVE-2021-0086

CVE.ORG link : CVE-2021-0086


JSON object : View

Products Affected

intel

  • pentium_processors
  • brand_verification_tool
  • celeron_processors
  • xeon_processors_firmware
  • xeon_processors
  • core_processors
  • itanium_processors_firmware
  • celeron_processors_firmware
  • core_processors_firmware
  • itanium_processors
  • pentium_processors_firmware

fedoraproject

  • fedora
CWE
CWE-203

Observable Discrepancy