CVE catalog

CVE-2020-24513

intel-microcode: CVE-2020-24513

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 25, 2026

Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed
Cpeatom_c3308Not reportedNot reportedunknown
Cpeatom_c3336Not reportedNot reportedunknown
Cpeatom_c3338Not reportedNot reportedunknown
Cpeatom_c3338rNot reportedNot reportedunknown
Cpeatom_c3436lNot reportedNot reportedunknown
Cpeatom_c3508Not reportedNot reportedunknown
Cpeatom_c3538Not reportedNot reportedunknown
Cpeatom_c3558Not reportedNot reportedunknown
Cpeatom_c3558rNot reportedNot reportedunknown
Cpeatom_c3558rcNot reportedNot reportedunknown
Cpeatom_c3708Not reportedNot reportedunknown
Cpeatom_c3750Not reportedNot reportedunknown
Cpeatom_c3758Not reportedNot reportedunknown
Cpeatom_c3758rNot reportedNot reportedunknown
Cpeatom_c3808Not reportedNot reportedunknown
Cpeatom_c3830Not reportedNot reportedunknown
Cpeatom_c3850Not reportedNot reportedunknown
Cpeatom_c3858Not reportedNot reportedunknown
Cpeatom_c3950Not reportedNot reportedunknown
Cpeatom_c3955Not reportedNot reportedunknown
Alpineintel-ucode3.1320210608-r0fixed
Alpineintel-ucode3.1420210608-r0fixed
Alpineintel-ucode3.1520210608-r0fixed
Alpineintel-ucode3.1620210608-r0fixed
Alpineintel-ucode3.1720210608-r0fixed
Alpineintel-ucode3.1820210608-r0fixed
Alpineintel-ucode3.1920210608-r0fixed
Alpineintel-ucode3.2020210608-r0fixed
Alpineintel-ucode3.2120210608-r0fixed
Alpineintel-ucode3.2220210608-r0fixed
Alpineintel-ucode3.2320210608-r0fixed
Alpineintel-ucode3.2420210608-r0fixed
Ubuntuintel-microcodepro3.20150121.1vulnerable
Ubuntuintel-microcodepro3.20151106.1vulnerable
Ubuntuintel-microcodepro3.20170707.1~ubuntu16.04.0vulnerable
Ubuntuintel-microcodepro3.20180108.0~ubuntu16.04.2vulnerable
Ubuntuintel-microcodepro3.20180108.0+really20170707ubuntu16.04.1vulnerable
Ubuntuintel-microcodepro3.20180312.0~ubuntu16.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20180425.1~ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20180807a.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20190514.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20190618.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20191112-0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.16.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.16.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.16.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.16.04.1+esm1fixed
Ubuntuintel-microcode18.043.20170707.1vulnerable
Ubuntuintel-microcode18.043.20171117.1vulnerable
Ubuntuintel-microcode18.043.20180108.1vulnerable
Ubuntuintel-microcode18.043.20180108.1+really20171117.1vulnerable
Ubuntuintel-microcode18.043.20180312.0~ubuntu18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20180425.1~ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20180807a.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20190514.0ubuntu0.18.04.3vulnerable
Ubuntuintel-microcode18.043.20190618.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191112-0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20191115.1ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20200609.0ubuntu0.18.04.0vulnerable
Ubuntuintel-microcode18.043.20200609.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20201110.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20201110.0ubuntu0.18.04.2vulnerable
Ubuntuintel-microcode18.043.20210216.0ubuntu0.18.04.1vulnerable
Ubuntuintel-microcode18.043.20210608.0ubuntu0.18.04.1fixed
Ubuntuintel-microcode20.043.20190918.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu1vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu2vulnerable
Ubuntuintel-microcode20.043.20191115.1ubuntu3vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcode20.043.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcode20.043.20210608.0ubuntu0.20.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20210608.1not yet assignedNot reported[989615]
Debianintel-microcodesourceforky3.20210608.1not yet assignedNot reported[989615]
Debianintel-microcodesourcetrixie3.20210608.1not yet assignedNot reported[989615]
Debianintel-microcodesourcebookworm3.20210608.1not yet assignedNot reported[989615]
Alpineintel-ucodeapk3.1320210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.1420210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.1520210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.1620210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.1720210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.1820210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.1920210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.2020210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.2120210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.2220210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.2320210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Alpineintel-ucodeapk3.2420210608-r0Not reportedALPINE-CVE-2020-24513Not reported
Ubuntuintel-microcodedebpro3.20210608.0ubuntu0.16.04.1+esm1Not reportedUBUNTU-CVE-2020-24513Not reported
Ubuntuintel-microcodedeb18.043.20210608.0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-24513Not reported
Ubuntuintel-microcodedeb20.043.20210608.0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-24513Not reported

[Debian bug #989615]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (1)
    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20210608.1

      dsa · intel-microcode · debian · bookworm; dsa · intel-microcode · debian · 12

[Debian 13 (Trixie)]

  • Details (1)
    • 3.20251111.1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.20210608.1

      dsa · intel-microcode · debian · 13

Observed:

References