CVE-2020-0550 Information disclosure in Snoop Assisted L1D Sampling Advisory
An authenticated local attacker can exploit improper data forwarding in Intel processor caches to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-0550?
CVE-2020-0550 is a medium-severity vulnerability in Intel Snoop Assisted L1D Sampling Advisory, published on 12 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
Which versions are affected by CVE-2020-0550?
It affects 752 products.
Products include Intel Celeron 1000m, Intel Celeron 1005m, Intel Celeron 1007u, Intel Celeron 1017u, Intel Celeron 1019y, Intel Celeron 1020e and 746 more.
How do I fix CVE-2020-0550?
No fix has been published for CVE-2020-0550 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-0550 being exploited?
There is no known exploitation of CVE-2020-0550 in the wild and no public exploit code.
Sources
Also known as GHSA-xw3h-h52h-wq24, UBUNTU-CVE-2020-0550.