CVE-2020-0551 Information disclosure in Intel(R) Processors Load Value Injection
An authenticated local attacker can exploit speculative execution side channels in Intel processors to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-0551?
CVE-2020-0551 is a medium-severity vulnerability in Intel(R) Processors Load Value Injection, published on 12 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
Which versions are affected by CVE-2020-0551?
It affects 1321 products.
Products include Intel Atom C2308, Intel Atom C2316, Intel Atom C2338, Intel Atom C2350, Intel Atom C2358, Intel Atom C2508 and 1315 more.
How do I fix CVE-2020-0551?
Apply the vendor's patch.
Is CVE-2020-0551 being exploited?
There is no known exploitation of CVE-2020-0551 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Intel(R) Processors Load Value Injection
- CVE-2021-33150 Privilege escalation in Intel(R) Trace Hub instances which
- CVE-2017-5703 Privilege escalation in Intel 6th generation Intel Core Processors, Intel 7th generation Processors, Intel Xeon Scalable Processors, Intel Xeon Processor E3 v5 Family, Intel Xeon Processor E3 v6 Family, and Intel Atom Processor C Series.
Sources
Also known as UBUNTU-CVE-2020-0551.