CVE-2019-11139 : Improper conditions check in the voltage modulation interface for some Intel(R)

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Published 2019-11-14 19:15:13

Updated 2022-11-11 02:39:07

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2019-11139

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Intel » Xeon 5120 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_5120_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 5120 » Version: N/A
Intel » Xeon 8153 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8153_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8153 » Version: N/A
Intel » Xeon 8156 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8156_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8156 » Version: N/A
Intel » Xeon 8158 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8158_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8158 » Version: N/A
Intel » Xeon 8160 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8160_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8160 » Version: N/A
Intel » Xeon 8160f Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8160f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8160f » Version: N/A
Intel » Xeon 8160m Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8160m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8160m » Version: N/A
Intel » Xeon 8160t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8160t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8160t » Version: N/A
Intel » Xeon 8164 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8164_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8164 » Version: N/A
Intel » Xeon 8168 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8168_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8168 » Version: N/A
Intel » Xeon 8170 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8170_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8170 » Version: N/A
Intel » Xeon 8170m Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8170m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8170m » Version: N/A
Intel » Xeon 8176 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8176_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8176 » Version: N/A
Intel » Xeon 8176f Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8176f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8176f » Version: N/A
Intel » Xeon 8176m Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8176m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8176m » Version: N/A
Intel » Xeon 8180 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8180_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8180 » Version: N/A
Intel » Xeon 8180m Firmware » Version: N/A
cpe:2.3:o:intel:xeon_8180m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 8180m » Version: N/A
Intel » Xeon 5115 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_5115_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 5115 » Version: N/A
Intel » Xeon 5118 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_5118_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 5118 » Version: N/A
Intel » Xeon 5119t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_5119t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 5119t » Version: N/A
Intel » Xeon 5120t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_5120t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 5120t » Version: N/A
Intel » Xeon 5122 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_5122_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 5122 » Version: N/A
Intel » Xeon 6126 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6126_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6126 » Version: N/A
Intel » Xeon 6126f Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6126f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6126f » Version: N/A
Intel » Xeon 6126t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6126t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6126t » Version: N/A
Intel » Xeon 6128 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6128_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6128 » Version: N/A
Intel » Xeon 6130 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6130_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6130 » Version: N/A
Intel » Xeon 6130f Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6130f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6130f » Version: N/A
Intel » Xeon 6130t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6130t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6130t » Version: N/A
Intel » Xeon 6132 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6132_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6132 » Version: N/A
Intel » Xeon 6134 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6134_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6134 » Version: N/A
Intel » Xeon 6134m Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6134m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6134m » Version: N/A
Intel » Xeon 6136 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6136_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6136 » Version: N/A
Intel » Xeon 6138 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6138_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6138 » Version: N/A
Intel » Xeon 6138f Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6138f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6138f » Version: N/A
Intel » Xeon 6138t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6138t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6138t » Version: N/A
Intel » Xeon 6140 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6140_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6140 » Version: N/A
Intel » Xeon 6140m Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6140m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6140m » Version: N/A
Intel » Xeon 6142 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6142_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6142 » Version: N/A
Intel » Xeon 6142f Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6142f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6142f » Version: N/A
Intel » Xeon 6144 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6144_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6144 » Version: N/A
Intel » Xeon 6146 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6146_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6146 » Version: N/A
Intel » Xeon 6148 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6148_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6148 » Version: N/A
Intel » Xeon 6148f Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6148f_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6148f » Version: N/A
Intel » Xeon 6150 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6150_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6150 » Version: N/A
Intel » Xeon 6152 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6152_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6152 » Version: N/A
Intel » Xeon 6154 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_6154_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 6154 » Version: N/A
Intel » Xeon 4108 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4108_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4108 » Version: N/A
Intel » Xeon 4109t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4109t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4109t » Version: N/A
Intel » Xeon 4110 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4110_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4110 » Version: N/A
Intel » Xeon 4112 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4112_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4112 » Version: N/A
Intel » Xeon 4114 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4114_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4114 » Version: N/A
Intel » Xeon 4114t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4114t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4114t » Version: N/A
Intel » Xeon 4116 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4116_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4116 » Version: N/A
Intel » Xeon 4116t Firmware » Version: N/A
cpe:2.3:o:intel:xeon_4116t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 4116t » Version: N/A
Intel » Xeon 3104 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_3104_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 3104 » Version: N/A
Intel » Xeon 3106 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_3106_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon 3106 » Version: N/A
Opensuse » Leap » Version: 15.0
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2019-11139

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-11139

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
6.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H	1.5	4.0	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2019-11139

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-11139

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03969en_us

HPESBHF03969 rev.1 - HPE ProLiant Gen10 Servers using certain Intel Xeon Scalable Processors, Voltage Modulation, Local Denial of Service
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html

[SECURITY] [DLA 2051-1] intel-microcode security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html

[security-announce] openSUSE-SU-2019:2527-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://seclists.org/bugtraq/2019/Dec/28

Bugtraq: [SECURITY] [DSA 4565-2] intel-microcode security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://support.f5.com/csp/article/K42433061?utm_source=f5support&utm_medium=RSS

Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html

INTEL-SA-00271
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html

[security-announce] openSUSE-SU-2019:2528-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2019-11139

Products affected by CVE-2019-11139

Exploit prediction scoring system (EPSS) score for CVE-2019-11139

CVSS scores for CVE-2019-11139

CWE ids for CVE-2019-11139

References for CVE-2019-11139