CVE-2025-20103 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
intel	CNA	6.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CISA-ADP	ADP	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 8%

Debian Releases

Debian Product

Codename

intel-microcode

bullseye/non-free	vulnerable
bullseye/non-free (security)	3.20250812.1~deb11u1 fixed
bookworm/non-free-firmware	3.20251111.1~deb12u1 fixed
bookworm/non-free-firmware (security)	3.20250812.1~deb12u1 fixed
trixie/non-free-firmware	3.20251111.1~deb13u1 fixed
trixie/non-free-firmware (security)	3.20250812.1~deb13u1 fixed
sid/non-free-firmware	3.20251111.1 fixed
forky/non-free-firmware	3.20251111.1 fixed

Ubuntu Releases

Ubuntu Product

Codename

intel-microcode

plucky	Fixed 3.20250512.0ubuntu0.25.04.1 released
oracular	Fixed 3.20250512.0ubuntu0.24.10.1 released
noble	Fixed 3.20250512.0ubuntu0.24.04.1 released
jammy	Fixed 3.20250512.0ubuntu0.22.04.1 released
focal	Fixed 3.20250512.0ubuntu0.20.04.1 released
bionic	Fixed 3.20250512.0ubuntu0.18.04.1+esm1 released
xenial	Fixed 3.20250512.0ubuntu0.16.04.1+esm1 released
trusty	ignored

Common Weakness Enumeration

CWE-410 - Insufficient Resource Pool
The software's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html

https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html