What’s Vulnerable › Vulnerabilities

CVE-2019-11139

• Severity: medium (CVSS 6.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-14 · updated 2026-06-17
• Weakness: CWE-754

Description

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

Affected products

• Debian Linux: 8.0
• Intel Xeon 3104 Firmware: all versions
• Intel Xeon 3106 Firmware: all versions
• Intel Xeon 4108 Firmware: all versions
• Intel Xeon 4109T Firmware: all versions
• Intel Xeon 4110 Firmware: all versions
• Intel Xeon 4112 Firmware: all versions
• Intel Xeon 4114 Firmware: all versions
• Intel Xeon 4114T Firmware: all versions
• Intel Xeon 4116 Firmware: all versions
• Intel Xeon 4116T Firmware: all versions
• Intel Xeon 5115 Firmware: all versions
• Intel Xeon 5118 Firmware: all versions
• Intel Xeon 5119T Firmware: all versions
• Intel Xeon 5120 Firmware: all versions
• Intel Xeon 5120T Firmware: all versions
• Intel Xeon 5122 Firmware: all versions
• Intel Xeon 6126 Firmware: all versions
• Intel Xeon 6126F Firmware: all versions
• Intel Xeon 6126T Firmware: all versions
• Intel Xeon 6128 Firmware: all versions
• Intel Xeon 6130 Firmware: all versions
• Intel Xeon 6130F Firmware: all versions
• Intel Xeon 6130T Firmware: all versions
• Intel Xeon 6132 Firmware: all versions
• Intel Xeon 6134 Firmware: all versions
• Intel Xeon 6134M Firmware: all versions
• Intel Xeon 6136 Firmware: all versions
• Intel Xeon 6138 Firmware: all versions
• Intel Xeon 6138F Firmware: all versions

References

• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html
• https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html
• https://seclists.org/bugtraq/2019/Dec/28
• https://support.f5.com/csp/article/K42433061?utm_source=f5support&amp%3Butm_medium=RSS
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03969en_us
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00046.html
• https://lists.debian.org/debian-lts-announce/2019/12/msg00035.html
• https://seclists.org/bugtraq/2019/Dec/28
• https://support.f5.com/csp/article/K42433061?utm_source=f5support&amp%3Butm_medium=RSS

Get alerted when CVE-2019-11139 or the next vulnerability affects your stack