Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2020-12912

Date: November 12, 2020

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.

Severity Score

Related Resources (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-12912
https://people.canonical.com/~ubuntu-security/cve/CVE-2020-12912
https://security-tracker.debian.org/tracker/CVE-2020-12912
https://www.amd.com/en/corporate/product-security
https://www.mend.io/vulnerability-database/CVE-2020-12912

Severity Score

Weakness Type (CWE)

Exposed Dangerous Method or Function

CWE-749

Observable Discrepancy

CWE-203

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us