CVE-2020-13844 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 33%

Affected Products (NVD)

Vendor	Product	Version
arm	cortex-a32_firmware	-
arm	cortex-a35_firmware	-
arm	cortex-a53_firmware	-
arm	cortex-a57_firmware	-
arm	cortex-a72_firmware	-
arm	cortex-a73_firmware	-
arm	cortex-a34_firmware	-
opensuse	leap	15.1
opensuse	leap	15.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

gcc-10

bionic	dne
eoan	ignored
focal	Fixed 10.2.0-5ubuntu1~20.04 released
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

gcc-3.3

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	ignored
xenial	deferred

gcc-4.4

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-4.6

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-4.7

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	ignored
xenial	deferred

gcc-4.7-armel-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-4.7-armhf-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-4.8

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	deferred
xenial	deferred

gcc-4.8-arm64-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-4.8-armhf-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-4.8-powerpc-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-4.8-ppc64el-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-4.9

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-5

bionic	not-affected
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	not-affected

gcc-5-cross

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-6

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-6-cross

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-6-cross-ports

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-7

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-7-cross

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-7-cross-ports

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-8

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-8-cross

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-8-cross-ports

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-9

bionic	dne
eoan	ignored
focal	Fixed 9.4.0-1ubuntu1~20.04 released
groovy	ignored
hirsute	ignored
impish	ignored
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

gcc-9-cross

bionic	dne
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	dne
xenial	dne

gcc-9-cross-ports

bionic	dne
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	dne
xenial	dne

gcc-arm-linux-androideabi

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-arm-none-eabi

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	dne
xenial	deferred

gcc-avr

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	dne
xenial	deferred

gcc-defaults

bionic	not-affected
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	deferred
xenial	not-affected

gcc-defaults-arm64-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-defaults-armel-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-defaults-armhf-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-defaults-powerpc-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-defaults-ppc64el-cross

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

gcc-h8300-hms

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	dne
xenial	deferred

gcc-i686-linux-android

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-m68hc1x

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

gcc-mingw-w64

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	ignored
xenial	deferred

gcc-msp430

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	dne
trusty	dne
xenial	deferred

gcc-opt

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	dne
xenial	deferred

gcc-snapshot

bionic	deferred
eoan	ignored
focal	deferred
groovy	ignored
hirsute	ignored
impish	ignored
jammy	deferred
kinetic	ignored
lunar	ignored
mantic	ignored
noble	deferred
trusty	dne
xenial	deferred

gccgo-4.9

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	ignored
xenial	dne

gccgo-6

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	not-affected

llvm-toolchain-3.3

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

llvm-toolchain-3.4

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

llvm-toolchain-3.5

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

llvm-toolchain-3.6

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	ignored
xenial	deferred

llvm-toolchain-3.7

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

llvm-toolchain-3.8

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	ignored
xenial	deferred

llvm-toolchain-3.9

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	ignored
xenial	deferred

llvm-toolchain-4.0

bionic	deferred
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	deferred

llvm-toolchain-snapshot

bionic	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

Common Weakness Enumeration

CWE-203 - Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References

http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions