CVE catalog

CVE-2019-11157

UBUNTU-CVE-2019-11157

[CVE catalog]

Severity
Medium · CVSS 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.68% · Oct 25, 2026

Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuintel-microcodepro1.20130906.1ubuntu2vulnerable
Ubuntuintel-microcodepro1.20130906.1ubuntu3vulnerable
Ubuntuintel-microcodepro2.20140122.1vulnerable
Ubuntuintel-microcodepro2.20140430.1ubuntu1vulnerable
Ubuntuintel-microcodepro2.20140624-t-1ubuntu2vulnerable
Ubuntuintel-microcodepro3.20180108.0~ubuntu14.04.2vulnerable
Ubuntuintel-microcodepro3.20180108.0+really20170707ubuntu14.04.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu14.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.14.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.14.04.2vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.14.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.14.04.1fixed
Ubuntuintel-microcode16.043.20150121.1vulnerable
Ubuntuintel-microcode16.043.20151106.1vulnerable
Ubuntuintel-microcode16.043.20170707.1~ubuntu16.04.0vulnerable
Ubuntuintel-microcode16.043.20180108.0~ubuntu16.04.2vulnerable
Ubuntuintel-microcode16.043.20180108.0+really20170707ubuntu16.04.1vulnerable
Ubuntuintel-microcode16.043.20180312.0~ubuntu16.04.1vulnerable
Ubuntuintel-microcode16.043.20180425.1~ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20180425.1~ubuntu0.16.04.2vulnerable
Ubuntuintel-microcode16.043.20180807a.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20190514.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20190514.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcode16.043.20190618.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20191112-0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcode16.043.20191115.1ubuntu0.16.04.1fixed
Ubuntuintel-microcode18.043.20170707.1vulnerable
Ubuntuintel-microcode18.043.20171117.1vulnerable
Ubuntuintel-microcode18.043.20180108.1vulnerable
Ubuntuintel-microcode18.043.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcode18.043.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcode18.043.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuintel-microcodedebpro3.20191115.1ubuntu0.14.04.1Not reportedUBUNTU-CVE-2019-11157Not reported
Ubuntuintel-microcodedeb16.043.20191115.1ubuntu0.16.04.1Not reportedUBUNTU-CVE-2019-11157Not reported
Ubuntuintel-microcodedeb18.043.20191115.1ubuntu0.18.04.1Not reportedUBUNTU-CVE-2019-11157Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References