Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2020-24489

Incomplete Cleanup

Published: Jun 09, 2021 | Modified: Apr 06, 2022
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
8.8 IMPORTANT
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Ubuntu
HIGH
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-24489
CWEhttps://cwe.mitre.org/data/definitions/459.html

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness

The product does not properly “clean up” and remove temporary or supporting resources after they have been used.

Affected Software

Name Vendor Start Version End Version
Atom_x5-e3930 Intel - (including) - (including)
Atom_x5-e3940 Intel - (including) - (including)
Atom_x7-e3950 Intel - (including) - (including)
Celeron_j1750 Intel - (including) - (including)
Celeron_j1800 Intel - (including) - (including)
Celeron_j1850 Intel - (including) - (including)
Celeron_j1900 Intel - (including) - (including)
Celeron_j3060 Intel - (including) - (including)
Celeron_j3160 Intel - (including) - (including)
Celeron_j3355 Intel - (including) - (including)
Celeron_j3355e Intel - (including) - (including)
Celeron_j3455 Intel - (including) - (including)
Celeron_j3455e Intel - (including) - (including)
Celeron_j4005 Intel - (including) - (including)
Celeron_j4025 Intel - (including) - (including)
Celeron_j4105 Intel - (including) - (including)
Celeron_j4115 Intel - (including) - (including)
Celeron_j4125 Intel - (including) - (including)
Celeron_j6412 Intel - (including) - (including)
Celeron_j6413 Intel - (including) - (including)
Celeron_n2805 Intel - (including) - (including)
Celeron_n2806 Intel - (including) - (including)
Celeron_n2807 Intel - (including) - (including)
Celeron_n2808 Intel - (including) - (including)
Celeron_n2810 Intel - (including) - (including)
Celeron_n2815 Intel - (including) - (including)
Celeron_n2820 Intel - (including) - (including)
Celeron_n2830 Intel - (including) - (including)
Celeron_n2840 Intel - (including) - (including)
Celeron_n2910 Intel - (including) - (including)
Celeron_n2920 Intel - (including) - (including)
Celeron_n2930 Intel - (including) - (including)
Celeron_n2940 Intel - (including) - (including)
Celeron_n3000 Intel - (including) - (including)
Celeron_n3010 Intel - (including) - (including)
Celeron_n3050 Intel - (including) - (including)
Celeron_n3060 Intel - (including) - (including)
Celeron_n3150 Intel - (including) - (including)
Celeron_n3160 Intel - (including) - (including)
Celeron_n3350 Intel - (including) - (including)
Celeron_n3350e Intel - (including) - (including)
Celeron_n3450 Intel - (including) - (including)
Celeron_n4000 Intel - (including) - (including)
Celeron_n4000c Intel - (including) - (including)
Celeron_n4020 Intel - (including) - (including)
Celeron_n4020c Intel - (including) - (including)
Celeron_n4100 Intel - (including) - (including)
Celeron_n4120 Intel - (including) - (including)
Celeron_n4500 Intel - (including) - (including)
Celeron_n4505 Intel - (including) - (including)
Celeron_n5095 Intel - (including) - (including)
Celeron_n5100 Intel - (including) - (including)
Celeron_n5105 Intel - (including) - (including)
Celeron_n6210 Intel - (including) - (including)
Celeron_n6211 Intel - (including) - (including)
Core_i3-1000g1 Intel - (including) - (including)
Core_i3-1000g4 Intel - (including) - (including)
Core_i3-1000ng4 Intel - (including) - (including)
Core_i3-1005g1 Intel - (including) - (including)
Core_i3-10100 Intel - (including) - (including)
Core_i3-10100e Intel - (including) - (including)
Core_i3-10100f Intel - (including) - (including)
Core_i3-10100t Intel - (including) - (including)
Core_i3-10100te Intel - (including) - (including)
Core_i3-10100y Intel - (including) - (including)
Core_i3-10105 Intel - (including) - (including)
Core_i3-10105f Intel - (including) - (including)
Core_i3-10105t Intel - (including) - (including)
Core_i3-10110u Intel - (including) - (including)
Core_i3-10110y Intel - (including) - (including)
Core_i3-10300 Intel - (including) - (including)
Core_i3-10300t Intel - (including) - (including)
Core_i3-10305 Intel - (including) - (including)
Core_i3-10305t Intel - (including) - (including)
Core_i3-10320 Intel - (including) - (including)
Core_i3-10325 Intel - (including) - (including)
Core_i3-11100b Intel - (including) - (including)
Core_i3-1110g4 Intel - (including) - (including)
Core_i3-1115g4 Intel - (including) - (including)
Core_i3-1115g4e Intel - (including) - (including)
Core_i3-1115gre Intel - (including) - (including)
Core_i3-1120g4 Intel - (including) - (including)
Core_i3-1125g4 Intel - (including) - (including)
Core_i3-l13g4 Intel - (including) - (including)
Core_i5-10200h Intel - (including) - (including)
Core_i5-10210u Intel - (including) - (including)
Core_i5-10210y Intel - (including) - (including)
Core_i5-10300h Intel - (including) - (including)
Core_i5-1030g4 Intel - (including) - (including)
Core_i5-1030g7 Intel - (including) - (including)
Core_i5-1030ng7 Intel - (including) - (including)
Core_i5-10310u Intel - (including) - (including)
Core_i5-10310y Intel - (including) - (including)
Core_i5-1035g1 Intel - (including) - (including)
Core_i5-1035g4 Intel - (including) - (including)
Core_i5-1035g7 Intel - (including) - (including)
Core_i5-1038ng7 Intel - (including) - (including)
Core_i5-10400 Intel - (including) - (including)
Core_i5-10400f Intel - (including) - (including)
Core_i5-10400h Intel - (including) - (including)
Core_i5-10400t Intel - (including) - (including)
Core_i5-10500 Intel - (including) - (including)
Core_i5-10500e Intel - (including) - (including)
Core_i5-10500h Intel - (including) - (including)
Core_i5-10500t Intel - (including) - (including)
Core_i5-10500te Intel - (including) - (including)
Core_i5-10505 Intel - (including) - (including)
Core_i5-10600 Intel - (including) - (including)
Core_i5-10600k Intel - (including) - (including)
Core_i5-10600kf Intel - (including) - (including)
Core_i5-10600t Intel - (including) - (including)
Core_i5-11260h Intel - (including) - (including)
Core_i5-11300h Intel - (including) - (including)
Core_i5-1130g7 Intel - (including) - (including)
Core_i5-11320h Intel - (including) - (including)
Core_i5-1135g7 Intel - (including) - (including)
Core_i5-11400 Intel - (including) - (including)
Core_i5-11400f Intel - (including) - (including)
Core_i5-11400h Intel - (including) - (including)
Core_i5-11400t Intel - (including) - (including)
Core_i5-1140g7 Intel - (including) - (including)
Core_i5-1145g7 Intel - (including) - (including)
Core_i5-1145g7e Intel - (including) - (including)
Core_i5-1145gre Intel - (including) - (including)
Core_i5-11500 Intel - (including) - (including)
Core_i5-11500b Intel - (including) - (including)
Core_i5-11500h Intel - (including) - (including)
Core_i5-11500t Intel - (including) - (including)
Core_i5-1155g7 Intel - (including) - (including)
Core_i5-11600 Intel - (including) - (including)
Core_i5-11600k Intel - (including) - (including)
Core_i5-11600kf Intel - (including) - (including)
Core_i5-11600t Intel - (including) - (including)
Core_i5-l16g7 Intel - (including) - (including)
Core_i7-10510u Intel - (including) - (including)
Core_i7-10510y Intel - (including) - (including)
Core_i7-1060g7 Intel - (including) - (including)
Core_i7-1060ng7 Intel - (including) - (including)
Core_i7-10610u Intel - (including) - (including)
Core_i7-1065g7 Intel - (including) - (including)
Core_i7-1068ng7 Intel - (including) - (including)
Core_i7-10700 Intel - (including) - (including)
Core_i7-10700e Intel - (including) - (including)
Core_i7-10700f Intel - (including) - (including)
Core_i7-10700k Intel - (including) - (including)
Core_i7-10700kf Intel - (including) - (including)
Core_i7-10700t Intel - (including) - (including)
Core_i7-10700te Intel - (including) - (including)
Core_i7-10710u Intel - (including) - (including)
Core_i7-10750h Intel - (including) - (including)
Core_i7-10810u Intel - (including) - (including)
Core_i7-10850h Intel - (including) - (including)
Core_i7-10870h Intel - (including) - (including)
Core_i7-10875h Intel - (including) - (including)
Core_i7-11370h Intel - (including) - (including)
Core_i7-11375h Intel - (including) - (including)
Core_i7-11390h Intel - (including) - (including)
Core_i7-1160g7 Intel - (including) - (including)
Core_i7-1165g7 Intel - (including) - (including)
Core_i7-11700 Intel - (including) - (including)
Core_i7-11700b Intel - (including) - (including)
Core_i7-11700f Intel - (including) - (including)
Core_i7-11700k Intel - (including) - (including)
Core_i7-11700kf Intel - (including) - (including)
Core_i7-11700t Intel - (including) - (including)
Core_i7-11800h Intel - (including) - (including)
Core_i7-1180g7 Intel - (including) - (including)
Core_i7-11850h Intel - (including) - (including)
Core_i7-1185g7 Intel - (including) - (including)
Core_i7-1185g7e Intel - (including) - (including)
Core_i7-1185gre Intel - (including) - (including)
Core_i7-1195g7 Intel - (including) - (including)
Core_i9-10850k Intel - (including) - (including)
Core_i9-10885h Intel - (including) - (including)
Core_i9-10900 Intel - (including) - (including)
Core_i9-10900e Intel - (including) - (including)
Core_i9-10900f Intel - (including) - (including)
Core_i9-10900k Intel - (including) - (including)
Core_i9-10900kf Intel - (including) - (including)
Core_i9-10900t Intel - (including) - (including)
Core_i9-10900te Intel - (including) - (including)
Core_i9-10910 Intel - (including) - (including)
Core_i9-10980hk Intel - (including) - (including)
Core_i9-11900 Intel - (including) - (including)
Core_i9-11900f Intel - (including) - (including)
Core_i9-11900h Intel - (including) - (including)
Core_i9-11900k Intel - (including) - (including)
Core_i9-11900kb Intel - (including) - (including)
Core_i9-11900kf Intel - (including) - (including)
Core_i9-11900t Intel - (including) - (including)
Core_i9-11950h Intel - (including) - (including)
Core_i9-11980hk Intel - (including) - (including)
Pentium_j2850 Intel - (including) - (including)
Pentium_j2900 Intel - (including) - (including)
Pentium_j3710 Intel - (including) - (including)
Pentium_j4205 Intel - (including) - (including)
Pentium_j6426 Intel - (including) - (including)
Pentium_n3510 Intel - (including) - (including)
Pentium_n3520 Intel - (including) - (including)
Pentium_n3530 Intel - (including) - (including)
Pentium_n3540 Intel - (including) - (including)
Pentium_n3700 Intel - (including) - (including)
Pentium_n3710 Intel - (including) - (including)
Pentium_n4200 Intel - (including) - (including)
Pentium_n4200e Intel - (including) - (including)
Pentium_n6415 Intel - (including) - (including)
Pentium_silver_a1030 Intel - (including) - (including)
Pentium_silver_j5005 Intel - (including) - (including)
Pentium_silver_j5040 Intel - (including) - (including)
Pentium_silver_n5000 Intel - (including) - (including)
Pentium_silver_n5030 Intel - (including) - (including)
Pentium_silver_n6000 Intel - (including) - (including)
Pentium_silver_n6005 Intel - (including) - (including)
Red Hat Enterprise Linux 6 Extended Lifecycle Support RedHat microcode_ctl-2:1.17-33.33.el6_10 *
Red Hat Enterprise Linux 7 RedHat microcode_ctl-2:2.1-73.9.el7_9 *
Red Hat Enterprise Linux 7 RedHat microcode_ctl-2:2.1-73.11.el7_9 *
Red Hat Enterprise Linux 7.2 Advanced Update Support RedHat microcode_ctl-2:2.1-12.37.el7_2 *
Red Hat Enterprise Linux 7.2 Advanced Update Support RedHat microcode_ctl-2:2.1-12.39.el7_2 *
Red Hat Enterprise Linux 7.3 Advanced Update Support RedHat microcode_ctl-2:2.1-16.40.el7_3 *
Red Hat Enterprise Linux 7.3 Advanced Update Support RedHat microcode_ctl-2:2.1-16.42.el7_3 *
Red Hat Enterprise Linux 7.4 Advanced Update Support RedHat microcode_ctl-2:2.1-22.39.el7_4 *
Red Hat Enterprise Linux 7.4 Advanced Update Support RedHat microcode_ctl-2:2.1-22.41.el7_4 *
Red Hat Enterprise Linux 7.4 Telco Extended Update Support RedHat microcode_ctl-2:2.1-22.39.el7_4 *
Red Hat Enterprise Linux 7.4 Telco Extended Update Support RedHat microcode_ctl-2:2.1-22.41.el7_4 *
Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions RedHat microcode_ctl-2:2.1-22.39.el7_4 *
Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions RedHat microcode_ctl-2:2.1-22.41.el7_4 *
Red Hat Enterprise Linux 7.6 Advanced Update Support RedHat microcode_ctl-2:2.1-47.21.el7_6 *
Red Hat Enterprise Linux 7.6 Advanced Update Support RedHat microcode_ctl-2:2.1-47.23.el7_6 *
Red Hat Enterprise Linux 7.6 Telco Extended Update Support RedHat microcode_ctl-2:2.1-47.21.el7_6 *
Red Hat Enterprise Linux 7.6 Telco Extended Update Support RedHat microcode_ctl-2:2.1-47.23.el7_6 *
Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions RedHat microcode_ctl-2:2.1-47.21.el7_6 *
Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions RedHat microcode_ctl-2:2.1-47.23.el7_6 *
Red Hat Enterprise Linux 7.7 Extended Update Support RedHat microcode_ctl-2:2.1-53.16.el7_7 *
Red Hat Enterprise Linux 7.7 Extended Update Support RedHat microcode_ctl-2:2.1-53.18.el7_7 *
Red Hat Enterprise Linux 8 RedHat microcode_ctl-4:20210216-1.20210525.1.el8_4 *
Red Hat Enterprise Linux 8 RedHat microcode_ctl-4:20210216-1.20210608.1.el8_4 *
Red Hat Enterprise Linux 8.1 Extended Update Support RedHat microcode_ctl-4:20190618-1.20210525.1.el8_1 *
Red Hat Enterprise Linux 8.1 Extended Update Support RedHat microcode_ctl-4:20190618-1.20210608.1.el8_1 *
Red Hat Enterprise Linux 8.2 Extended Update Support RedHat microcode_ctl-4:20191115-4.20210525.1.el8_2 *
Red Hat Enterprise Linux 8.2 Extended Update Support RedHat microcode_ctl-4:20191115-4.20210608.1.el8_2 *
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 RedHat redhat-virtualization-host-0:4.3.16-20210615.0.el7_9 *
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 RedHat redhat-virtualization-host-0:4.4.6-20210615.0.el8_4 *
Intel-microcode Ubuntu bionic *
Intel-microcode Ubuntu devel *
Intel-microcode Ubuntu esm-infra/xenial *
Intel-microcode Ubuntu focal *
Intel-microcode Ubuntu groovy *
Intel-microcode Ubuntu hirsute *
Intel-microcode Ubuntu impish *
Intel-microcode Ubuntu jammy *
Intel-microcode Ubuntu trusty *
Intel-microcode Ubuntu trusty/esm *
Intel-microcode Ubuntu xenial *

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use