CVE catalog

CVE-2020-0549

intel-microcode: CVE-2020-0549

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.56% · Oct 25, 2026

Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed
Ubuntuintel-microcodepro1.20130906.1ubuntu2vulnerable
Ubuntuintel-microcodepro1.20130906.1ubuntu3vulnerable
Ubuntuintel-microcodepro2.20140122.1vulnerable
Ubuntuintel-microcodepro2.20140430.1ubuntu1vulnerable
Ubuntuintel-microcodepro2.20140624-t-1ubuntu2vulnerable
Ubuntuintel-microcodepro3.20180108.0~ubuntu14.04.2vulnerable
Ubuntuintel-microcodepro3.20180108.0+really20170707ubuntu14.04.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu14.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.14.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.14.04.2vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.14.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.14.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.14.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.14.04.0fixed
Ubuntuintel-microcode16.043.20150121.1vulnerable
Ubuntuintel-microcode16.043.20151106.1vulnerable
Ubuntuintel-microcode16.043.20170707.1~ubuntu16.04.0vulnerable
Ubuntuintel-microcode16.043.20180108.0~ubuntu16.04.2vulnerable
Ubuntuintel-microcode16.043.20180108.0+really20170707ubuntu16.04.1vulnerable
Ubuntuintel-microcode16.043.20180312.0~ubuntu16.04.1vulnerable
Ubuntuintel-microcode16.043.20180425.1~ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20180425.1~ubuntu0.16.04.2vulnerable
Ubuntuintel-microcode16.043.20180807a.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20190514.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20190514.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcode16.043.20190618.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20191112-0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcode16.043.20191115.1ubuntu0.16.04.1vulnerable
Ubuntuintel-microcode16.043.20191115.1ubuntu0.16.04.2vulnerable
Ubuntuintel-microcode16.043.20200609.0ubuntu0.16.04.0fixed
Ubuntuintel-microcode18.043.20170707.1vulnerable
Ubuntuintel-microcode18.043.20171117.1vulnerable
Ubuntuintel-microcode18.043.20180108.1vulnerable
Ubuntuintel-microcode18.043.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcode18.043.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcode18.043.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20200609.0ubuntu0.18.04.0fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20200609.1not yet assignedNot reportedNot reported
Debianintel-microcodesourceforky3.20200609.1not yet assignedNot reportedNot reported
Debianintel-microcodesourcetrixie3.20200609.1not yet assignedNot reportedNot reported
Debianintel-microcodesourcebookworm3.20200609.1not yet assignedNot reportedNot reported
Ubuntuintel-microcodedebpro3.20200609.0ubuntu0.14.04.0Not reportedUBUNTU-CVE-2020-0549Not reported
Ubuntuintel-microcodedeb16.043.20200609.0ubuntu0.16.04.0Not reportedUBUNTU-CVE-2020-0549Not reported
Ubuntuintel-microcodedeb18.043.20200609.0ubuntu0.18.04.0Not reportedUBUNTU-CVE-2020-0549Not reported
Ubuntuintel-microcodedeb20.043.20200609.0ubuntu0.20.04.0Not reportedUBUNTU-CVE-2020-0549Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (1)
    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20200609.1

      dsa · intel-microcode · debian · bookworm; dsa · intel-microcode · debian · 12

[Debian 13 (Trixie)]

  • Details (1)
    • 3.20251111.1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.20200609.1

      dsa · intel-microcode · debian · 13

Observed:

References