CVE-2020-13844 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 40%

Vendor	Product	Version
arm	cortex-a32_firmware	-
arm	cortex-a35_firmware	-
arm	cortex-a53_firmware	-
arm	cortex-a57_firmware	-
arm	cortex-a72_firmware	-
arm	cortex-a73_firmware	-
arm	cortex-a34_firmware	-
opensuse	leap	15.1
opensuse	leap	15.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

gcc-10

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	not-affected
groovy	not-affected
focal	Fixed 10.2.0-5ubuntu1~20.04 released
eoan	ignored
bionic	dne
xenial	dne
trusty	dne

gcc-3.3

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	ignored

gcc-4.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

gcc-4.6

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

gcc-4.7

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	ignored

gcc-4.7-armel-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-4.7-armhf-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-4.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	deferred
trusty	deferred

gcc-4.8-arm64-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-4.8-armhf-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-4.8-powerpc-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-4.8-ppc64el-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-4.9

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-5

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	not-affected
trusty	dne

gcc-5-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	deferred
trusty	dne

gcc-6

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	dne
trusty	dne

gcc-6-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	dne
trusty	dne

gcc-6-cross-ports

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	dne
trusty	dne

gcc-7

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	dne
trusty	dne

gcc-7-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	dne
trusty	dne

gcc-7-cross-ports

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	dne
trusty	dne

gcc-8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	dne
trusty	dne

gcc-8-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	dne
trusty	dne

gcc-8-cross-ports

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	dne
trusty	dne

gcc-9

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	ignored
hirsute	ignored
groovy	ignored
focal	Fixed 9.4.0-1ubuntu1~20.04 released
eoan	ignored
bionic	dne
xenial	dne
trusty	dne

gcc-9-cross

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	dne
xenial	dne
trusty	dne

gcc-9-cross-ports

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	dne
xenial	dne
trusty	dne

gcc-arm-linux-androideabi

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-arm-none-eabi

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	dne

gcc-avr

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	dne

gcc-defaults

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	not-affected
xenial	not-affected
trusty	deferred

gcc-defaults-arm64-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

gcc-defaults-armel-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

gcc-defaults-armhf-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

gcc-defaults-powerpc-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

gcc-defaults-ppc64el-cross

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

gcc-h8300-hms

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	dne

gcc-i686-linux-android

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

gcc-m68hc1x

noble	dne
mantic	dne
lunar	dne
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	dne

gcc-mingw-w64

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	ignored

gcc-msp430

noble	dne
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	dne

gcc-opt

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	dne

gcc-snapshot

noble	deferred
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	deferred
impish	ignored
hirsute	ignored
groovy	ignored
focal	deferred
eoan	ignored
bionic	deferred
xenial	deferred
trusty	dne

gccgo-4.9

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	ignored

gccgo-6

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	not-affected
trusty	dne

llvm-toolchain-3.3

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

llvm-toolchain-3.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

llvm-toolchain-3.5

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	dne

llvm-toolchain-3.6

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	ignored

llvm-toolchain-3.7

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	deferred
trusty	dne

llvm-toolchain-3.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	deferred
trusty	ignored

llvm-toolchain-3.9

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	deferred
trusty	ignored

llvm-toolchain-4.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	deferred
xenial	deferred
trusty	dne

llvm-toolchain-snapshot

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
bionic	dne
xenial	dne
trusty	dne

Common Weakness Enumeration

CWE-203 - Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References

http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions