Vulnerability Description
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I7-8510Y Firmware | - |
| Intel | Core I7-8510Y | - |
| Intel | Core I7-8500Y Firmware | - |
| Intel | Core I7-8500Y | - |
| Intel | Core I5-8310Y Firmware | - |
| Intel | Core I5-8310Y | - |
| Intel | Core I5-8210Y Firmware | - |
| Intel | Core I5-8210Y | - |
| Intel | Core I5-8200Y Firmware | - |
| Intel | Core I5-8200Y | - |
| Intel | Core M3-8100Y Firmware | - |
| Intel | Core M3-8100Y | - |
| Intel | Core I7-7500U Firmware | - |
| Intel | Core I7-7500U | - |
| Intel | Core I7-7510U Firmware | - |
| Intel | Core I7-7510U | - |
| Intel | Core I7-7600U Firmware | - |
| Intel | Core I7-7600U | - |
| Intel | Core I5-7200U Firmware | - |
| Intel | Core I5-7200U | - |
Related Weaknesses (CWE)
References
- https://lists.debian.org/debian-lts-announce/2021/02/msg00007.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/02/msg00007.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389Vendor Advisory
FAQ
What is CVE-2020-8695?
CVE-2020-8695 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
How severe is CVE-2020-8695?
CVE-2020-8695 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-8695?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Core I7-8510Y Firmware, Intel Core I7-8510Y, Intel Core I7-8500Y Firmware, Intel Core I7-8500Y, Intel Core I5-8310Y Firmware.