CVE-2019-11135

—

CVSS 3.1

6.5 medium

EPSS

3%p87

Published

Nov 14, 2019 (Nov 14, 2019)

Modified

Jun 17, 2026

Description

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Vendors: opensuse fedoraproject slackware hp intel canonical debian redhat oracle
Products: leap, fedora, slackware, apollo 4200 firmware, apollo 2000 firmware, proliant bl460c firmware, proliant dl580 firmware, proliant dl560 firmware, proliant dl380 firmware, proliant dl360 firmware, proliant dl180 firmware, proliant dl160 firmware
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.1%)

In the news3 stories

Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosNov 12, 19:58 UTC · Nov 12, 2019Vulnerability CVE-2019-1448 CVE-2019-0721 CVE-2019-1389+70 CVEs

New ZombieLoad v2 Attack Affects Intel's Latest Cascade Lake CPUs

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2019Vulnerability CVE-2019-11135

New TSX Speculative Attack allows stealing sensitive data

Security AffairsNov 13, 15:39 UTC · Nov 13, 2019Vulnerability CVE-2019-11135