Security Advisories for Intel Products 2019-11-12 2019.2 IPU

On 12 November 2019, Intel released several Security Advisories for various Intel products as part of the 2019.2 IPU (Intel Platform Update). Some of these security advisories require firmware updates. In this article you will find information about these security advisories and where you will find updates for Thomas-Krenn products.

Security Advisories

Intel Security Advisory	Title	CVE	Affected systems
INTEL-SA-00220	2019.2 IPU – Intel SGX and TXT Advisory	CVE-2018-0123 8.2 High CVE-2019-0124 8.2 High	6th, 7th, 8th, 9th and 10th Generation Intel Core Processor Intel Xeon E3 v5 & v6 Processor Intel Xeon E-2100 & E-2200 Processor
INTEL-SA-00241	2019.2 IPU - Intel CSME, Intel SPS, Intel TXE, Intel AMT, Intel PTT and Intel DAL Advisory	CVE-2019-0131 7.1 High CVE-2019-0165 4.4 Medium CVE-2019-0166 5.9 Medium CVE-2019-0168 4.6 Medium CVE-2019-0169 9.6 Critical CVE-2019-11086 3.5 Low CVE-2019-11087 6.4 Medium CVE-2019-11088 7.5 High CVE-2019-11090 6.8 Medium CVE-2019-11097 7.3 High CVE-2019-11101 4.4 Medium CVE-2019-11100 6.1 Medium CVE-2019-11102 4.1 Medium CVE-2019-11103 7.3 High CVE-2019-11104 7.3 High CVE-2019-11105 7.9 High CVE-2019-11106 4.4 Medium CVE-2019-11107 5.3 Medium CVE-2019-11108 2.3 Low CVE-2019-11109 4.4 Medium CVE-2019-11110 4.1 Medium CVE-2019-11131 7.5 High CVE-2019-11132 8.4 High CVE-2019-11147 8.2 High	CSME, AMT, DAL, DAL Software: 11.0 up to 11.8.65 11.10 up to 11.11.65 11.20 up to 11.22.65 12.0 up to 12.0.35 13.0.0 14.0.0 SPS: SPS_E5_04.00.03.199.0 up to SPS_E5_04.00.04.380.0 Versions before SPS_E5_04.01.04.297.0 SPS_SoC-X_04.00.04.051.0 up to SPS_SoC-X_04.00.04.085.0 SPS_SoC-A_04.00.03.065.0 up to SPS_SoC-A_04.00.04.180.0 SPS_E3_04.01.03.021.0 up to SPS_E3_04.01.04.053.0 TXE: 3.0 up to 3.1.65 4.0 up to 4.0.15
INTEL-SA-00254	2019.2 IPU - Intel Processor Graphics SMM Advisory	CVE-2019-00185 6.0 Medium	6th, 7th, 8th, 9th and 10th Generation Intel Core Processor with Processor Graphics Intel Xeon Processor E3-1500 v5 and v6 with Processor Graphics Intel Xeon E-2100 and E-2200 Processor with Processor Graphics
INTEL-SA-00270	2019.2 IPU – TSX Asynchronous Abort Advisory ZombieLoad v2	CVE-2019-11135 6.5 Medium	8th, 9th and 10th Generation Intel Core Processor 2nd Generation Intel Xeon Scalable Processor Intel Xeon W Processor Intel Xeon E-2200 Processor Intel Pentium Gold Processor Intel Celeron 5000 Processor

Updates for products from Thomas-Krenn

Information about updates will be published in the following Wiki article as soon as updates are available:

• BIOS security updates

Further information

• Intel Product Security Center Advisories (www.intel.com)
• Supermicro Security Center (www.supermicro.com)
• Intel Platform Update (IPU) 2019.2, November 2019 (www.supermicro.com)

Author: Thomas Niedermeier Thomas Niedermeier working in the product management team at Thomas-Krenn, completed his bachelor's degree in business informatics at the Deggendorf University of Applied Sciences. Since 2013 Thomas is employed at Thomas-Krenn and takes care of OPNsense firewalls, the Thomas-Krenn-Wiki and firmware security updates.