{"api_version":"1","generated_at":"2026-10-11T17:14:01+00:00","cve":"CVE-2019-11091","urls":{"html":"https://cve.report/CVE-2019-11091","api":"https://cve.report/api/cve/CVE-2019-11091.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2019-11091","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-11091"},"summary":{"title":"CVE-2019-11091","description":"Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf","state":"PUBLISHED","assigner":"intel","published_at":"2019-05-30 16:29:01","updated_at":"2026-05-28 19:16:28"},"problem_types":["NVD-CWE-noinfo","Information Disclosure","CWE-noinfo Not enough information"],"metrics":[{"version":"3.1","source":"ADP","type":"DECLARED","score":"5.6","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","data":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"5.6","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"5.6","severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.7","severity":"","vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://seclists.org/bugtraq/2020/Jan/21","name":"https://seclists.org/bugtraq/2020/Jan/21","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bugtraq: [SECURITY] [DSA 4602-1] xen security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html","name":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] openSUSE-SU-2019:1806-1: important: Security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"INTEL-SA-00233","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc","name":"https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","name":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"application/pdf","httpstatus":"200","archivestatus":"200"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf","name":"https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"application/pdf","httpstatus":"200","archivestatus":"200"},{"url":"https://security.gentoo.org/glsa/202003-56","name":"https://security.gentoo.org/glsa/202003-56","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Xen: Multiple vulnerabilities (GLSA 202003-56) — Gentoo security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2019:2553","name":"https://access.redhat.com/errata/RHSA-2019:2553","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html","name":"https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] [DLA 1789-2] intel-microcode security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/","name":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 29 Update: xen-4.11.1-5.fc29 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://seclists.org/bugtraq/2019/Jun/28","name":"https://seclists.org/bugtraq/2019/Jun/28","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bugtraq: [SECURITY] [DSA 4447-2] intel-microcode security update","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.debian.org/security/2020/dsa-4602","name":"https://www.debian.org/security/2020/dsa-4602","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-4602-1 xen","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en","name":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory - Intel Microarchitectural Data Sampling (MDS) vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2019:1455","name":"https://access.redhat.com/errata/RHSA-2019:1455","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://seclists.org/bugtraq/2019/Nov/15","name":"https://seclists.org/bugtraq/2019/Nov/15","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bugtraq: [SECURITY] [DSA 4564-1] linux security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10292","name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10292","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"McAfee Security Bulletin - Updates for Intel®​ \"ZombieLoad\" microprocessor data leakage flaws (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html","name":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] openSUSE-SU-2019:1505-1: important: Security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://seclists.org/bugtraq/2019/Jun/36","name":"https://seclists.org/bugtraq/2019/Jun/36","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bugtraq: [SECURITY] [DSA 4469-1] libvirt security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/3977-3/","name":"https://usn.ubuntu.com/3977-3/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-3977-3: Intel Microcode update | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_24","name":"https://www.synology.com/security/advisory/Synology_SA_19_24","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Synology Inc.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","name":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html","name":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] openSUSE-SU-2019:1805-1: important: Security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/","name":"FEDORA:FEDORA-2019-1f5832fc0e","refsource":"MITRE","tags":[],"title":"[SECURITY] Fedora 29 Update: xen-4.11.1-5.fc29 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11091","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11091","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Intel Corporation","product":"Central Processing Units (CPUs)","version":"affected A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2019","cve_id":"11091","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"11091","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"intel","cpe5":"microarchitectural_data_sampling_uncacheable_memory","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"11091","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"intel","cpe5":"microarchitectural_data_sampling_uncacheable_memory_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2019","cve_id":"11091","cve":"CVE-2019-11091","epss":"0.016970000","percentile":"0.826100000","score_date":"2026-06-02","updated_at":"2026-06-03 00:08:17"},"legacy_qids":[{"cve":"CVE-2019-11091","qid":"296079","title":"Oracle Solaris 11.4 Support Repository Update (SRU) 15.5.0 Missing (CPUOCT2019)"},{"cve":"CVE-2019-11091","qid":"377003","title":"Alibaba Cloud Linux Security Update for qemu-kvm (ALINUX2-SA-2019:0030)"},{"cve":"CVE-2019-11091","qid":"377032","title":"Alibaba Cloud Linux Security Update for libvirt (ALINUX2-SA-2019:0032)"},{"cve":"CVE-2019-11091","qid":"378146","title":"Virtuozzo Linux Security Update for libvirt-lock-sanlock (VZLSA-2019:1180)"},{"cve":"CVE-2019-11091","qid":"378208","title":"Virtuozzo Linux Security Update for qemu-guest-agent (VZLSA-2019:1181)"},{"cve":"CVE-2019-11091","qid":"500752","title":"Alpine Linux Security Update for xen"},{"cve":"CVE-2019-11091","qid":"504529","title":"Alpine Linux Security Update for xen"},{"cve":"CVE-2019-11091","qid":"590937","title":"Siemens SIMATIC WinAC RTX (F) 2010 Multiple Vulnerabilities (ssa-608355)"},{"cve":"CVE-2019-11091","qid":"591420","title":"Siemens ZombieLoad and Microarchitectural Data Sampling Vulnerabilities (SSA-616472)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T22:40:16.292Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.synology.com/security/advisory/Synology_SA_19_24"},{"name":"FEDORA-2019-1f5832fc0e","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"},{"name":"openSUSE-SU-2019:1505","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"},{"name":"RHSA-2019:1455","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2019:1455"},{"name":"USN-3977-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/3977-3/"},{"name":"[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"},{"name":"20190624 [SECURITY] [DSA 4447-2] intel-microcode security update","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"https://seclists.org/bugtraq/2019/Jun/28"},{"name":"20190624 [SECURITY] [DSA 4469-1] libvirt security update","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"https://seclists.org/bugtraq/2019/Jun/36"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"},{"name":"openSUSE-SU-2019:1805","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"},{"name":"openSUSE-SU-2019:1806","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"},{"name":"FreeBSD-SA-19:07","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"],"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"},{"name":"RHSA-2019:2553","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2019:2553"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10292"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"},{"name":"20191112 [SECURITY] [DSA 4564-1] linux security update","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"https://seclists.org/bugtraq/2019/Nov/15"},{"name":"DSA-4602","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"https://www.debian.org/security/2020/dsa-4602"},{"name":"20200114 [SECURITY] [DSA 4602-1] xen security update","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"https://seclists.org/bugtraq/2020/Jan/21"},{"name":"GLSA-202003-56","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"https://security.gentoo.org/glsa/202003-56"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"}},{"other":{"content":{"id":"CVE-2019-11091","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-28T18:16:57.036809Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-05-28T18:17:01.249Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Central Processing Units (CPUs)","vendor":"Intel Corporation","versions":[{"status":"affected","version":"A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"}]}],"datePublic":"2019-05-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2020-03-26T14:06:10.000Z","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","shortName":"intel"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://www.synology.com/security/advisory/Synology_SA_19_24"},{"name":"FEDORA-2019-1f5832fc0e","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"},{"name":"openSUSE-SU-2019:1505","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"},{"name":"RHSA-2019:1455","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2019:1455"},{"name":"USN-3977-3","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/3977-3/"},{"name":"[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update","tags":["mailing-list","x_refsource_MLIST"],"url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"},{"name":"20190624 [SECURITY] [DSA 4447-2] intel-microcode security update","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"https://seclists.org/bugtraq/2019/Jun/28"},{"name":"20190624 [SECURITY] [DSA 4469-1] libvirt security update","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"https://seclists.org/bugtraq/2019/Jun/36"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"},{"tags":["x_refsource_CONFIRM"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"},{"name":"openSUSE-SU-2019:1805","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"},{"name":"openSUSE-SU-2019:1806","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"},{"name":"FreeBSD-SA-19:07","tags":["vendor-advisory","x_refsource_FREEBSD"],"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"},{"name":"RHSA-2019:2553","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2019:2553"},{"tags":["x_refsource_CONFIRM"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10292"},{"tags":["x_refsource_CONFIRM"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"},{"name":"20191112 [SECURITY] [DSA 4564-1] linux security update","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"https://seclists.org/bugtraq/2019/Nov/15"},{"name":"DSA-4602","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"https://www.debian.org/security/2020/dsa-4602"},{"name":"20200114 [SECURITY] [DSA 4602-1] xen security update","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"https://seclists.org/bugtraq/2020/Jan/21"},{"name":"GLSA-202003-56","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"https://security.gentoo.org/glsa/202003-56"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@intel.com","ID":"CVE-2019-11091","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Central Processing Units (CPUs)","version":{"version_data":[{"version_value":"A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"}]}}]},"vendor_name":"Intel Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Disclosure"}]}]},"references":{"reference_data":[{"name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html","refsource":"CONFIRM","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"},{"name":"https://www.synology.com/security/advisory/Synology_SA_19_24","refsource":"CONFIRM","url":"https://www.synology.com/security/advisory/Synology_SA_19_24"},{"name":"FEDORA-2019-1f5832fc0e","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"},{"name":"openSUSE-SU-2019:1505","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"},{"name":"RHSA-2019:1455","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1455"},{"name":"USN-3977-3","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3977-3/"},{"name":"[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"},{"name":"20190624 [SECURITY] [DSA 4447-2] intel-microcode security update","refsource":"BUGTRAQ","url":"https://seclists.org/bugtraq/2019/Jun/28"},{"name":"20190624 [SECURITY] [DSA 4469-1] libvirt security update","refsource":"BUGTRAQ","url":"https://seclists.org/bugtraq/2019/Jun/36"},{"name":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","refsource":"CONFIRM","url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"},{"name":"https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf","refsource":"CONFIRM","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"},{"name":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en","refsource":"CONFIRM","url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"},{"name":"openSUSE-SU-2019:1805","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"},{"name":"openSUSE-SU-2019:1806","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"},{"name":"FreeBSD-SA-19:07","refsource":"FREEBSD","url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"},{"name":"RHSA-2019:2553","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:2553"},{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10292","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10292"},{"name":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","refsource":"CONFIRM","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"},{"name":"20191112 [SECURITY] [DSA 4564-1] linux security update","refsource":"BUGTRAQ","url":"https://seclists.org/bugtraq/2019/Nov/15"},{"name":"DSA-4602","refsource":"DEBIAN","url":"https://www.debian.org/security/2020/dsa-4602"},{"name":"20200114 [SECURITY] [DSA 4602-1] xen security update","refsource":"BUGTRAQ","url":"https://seclists.org/bugtraq/2020/Jan/21"},{"name":"GLSA-202003-56","refsource":"GENTOO","url":"https://security.gentoo.org/glsa/202003-56"}]}}}},"cveMetadata":{"assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","assignerShortName":"intel","cveId":"CVE-2019-11091","datePublished":"2019-05-30T15:28:28.000Z","dateReserved":"2019-04-11T00:00:00.000Z","dateUpdated":"2026-05-28T18:17:01.249Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2019-05-30 16:29:01","lastModifiedDate":"2026-05-28 19:16:28","problem_types":["NVD-CWE-noinfo","Information Disclosure","CWE-noinfo Not enough information"],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":4}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:intel:microarchitectural_data_sampling_uncacheable_memory_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6B28D458-E322-4CCE-9E5C-D56E9FF70198"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:intel:microarchitectural_data_sampling_uncacheable_memory:-:*:*:*:*:*:*:*","matchCriteriaId":"74BFF53A-9A81-48DD-B69D-ADF88EBD9835"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","matchCriteriaId":"D100F7CE-FC64-4CC6-852A-6136D72DA419"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2019","CveId":"11091","Ordinal":"1","Title":"CVE-2019-11091","CVE":"CVE-2019-11091","Year":"2019"},"notes":[{"CveYear":"2019","CveId":"11091","Ordinal":"1","NoteData":"Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf","Type":"Description","Title":"CVE-2019-11091"},{"CveYear":"2019","CveId":"11091","Ordinal":"2","NoteData":"2019-05-30","Type":"Other","Title":"Published"},{"CveYear":"2019","CveId":"11091","Ordinal":"3","NoteData":"2020-03-26","Type":"Other","Title":"Modified"}]}}}