CVE-2020-8695

EUVD-2020-29543 · Published Nov 12, 2020

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Technologies

Intel Core I8350K FirmwareIntel Core I3-8100Intel Pentium G4420T FirmwareIntel Core I7-8705G FirmwareIntel Core I7-7700TIntel Xeon E3-1535M FirmwareIntel Core I5-7200U FirmwareIntel Core I5-7600 FirmwareIntel Core I7-6560U FirmwareIntel Core I7-8706G FirmwareIntel Core I7-7700T FirmwareIntel Xeon E-2134 FirmwareIntel Celeron 3855UIntel Core I9-9880HIntel Xeon E3-1578LIntel Core I5-9400Intel Celeron G3940Intel Core I7-7740XIntel Core I5-1035G7 FirmwareIntel Core I5-8500 FirmwareIntel Core I5-8259UIntel Core I5-7440Eq FirmwareIntel Core I5-6600Intel Xeon E-2124G FirmwareIntel Core I3-8300Intel Core I5-6287U FirmwareIntel Core I3-1000G1 FirmwareIntel Core I5-6500T FirmwareIntel Core I3-8145U FirmwareIntel Xeon E-2126GIntel Core I5-7600TIntel Xeon E3-1501L FirmwareIntel Xeon E3-1275Intel Core I5-6400TIntel Core I7-6650U FirmwareIntel Pentium Silver N5000 FirmwareIntel Celeron J4025 FirmwareIntel Core I5-8600T FirmwareIntel Core I5-7640X FirmwareIntel Core I5-6300UIntel Core I5-7Y54Intel Core I3-6100 FirmwareIntel Core I5-7300UIntel Core I5-8310YIntel Core I7-6660U FirmwareIntel Xeon E3-1505LIntel Core I5-1035G4 FirmwareIntel Core I5-7400T FirmwareIntel Core I5-9300H FirmwareIntel Core I3-8100 FirmwareIntel Core I5-6442Eq FirmwareIntel Core I7-6700TIntel Core I5-7Y57Intel Core I5-9600Kf FirmwareIntel Xeon E3-1280Intel Core I5-6310UIntel Core I8130UIntel Core M5-6Y54 FirmwareIntel Xeon E3-1230 FirmwareIntel Core I7-7740X FirmwareIntel Core I7-6660UIntel Core I7-10750H FirmwareIntel Xeon E-2174GIntel Core I7-1065G7 FirmwareIntel Core I7-7700K FirmwareIntel Xeon E3-1270 FirmwareIntel Core I7-8706GIntel Core I9-10900Intel Core I3-6100E FirmwareIntel Core I3-8000TIntel Core I7-9700KIntel Core I3-6120Intel Pentium G4520TIntel Celeron G3900E FirmwareIntel Core I5-6440HqIntel Xeon E-2176M FirmwareIntel Core I7-6567UIntel Core I5-8300H FirmwareIntel Xeon E-2278GeIntel Pentium G4420 FirmwareIntel Core I5-6260U FirmwareIntel Core I5-6440EqIntel Xeon E3-1515MIntel Core I5-6287UIntel Core I5-8350U FirmwareIntel Core I7-8709G FirmwareIntel Core I7-7560U FirmwareIntel Core I7-7820Hq FirmwareIntel Xeon E3-1240L FirmwareIntel Core I5-8265UIntel Xeon E3-1565LIntel Core I3-6100TIntel Xeon E3-1235LIntel Core I5-7287U FirmwareIntel Core I3-7020U FirmwareIntel Core I7-7820Eq FirmwareIntel Core I3-8120 FirmwareIntel Core I5-7442EqIntel Core I7-8700KIntel Celeron J4105 FirmwareIntel Core I5-8210Y FirmwareIntel Celeron 3965U FirmwareIntel Core I5-7440EqIntel Core I5-8365UIntel Celeron 3955U FirmwareIntel Core I7-8500YIntel Core I3-7320T FirmwareIntel Core I5-8550Intel Core I5-8600 FirmwareIntel Core I3-7100EIntel Pentium G4500TIntel Core I3-8000T FirmwareIntel Core I3-7110U FirmwareIntel Core I7-8700K FirmwareIntel Core I3-7120Intel Core I5-7500TIntel Core I7-10750HIntel Core I7-6822Eq FirmwareIntel Core I5-7640XIntel Core I5-6300U FirmwareIntel Core I7-6820Hq FirmwareIntel Core I5-7500UIntel Core I3-7007UIntel Core I5-8400B FirmwareIntel Core I3-7100HIntel Xeon E3-1558L FirmwareIntel Xeon E3-1558LIntel Core I7-8670TIntel Pentium G4540 FirmwareIntel Pentium 4405YIntel Core I5-6400T FirmwareIntel Core I7-8850H FirmwareIntel Pentium G4500 FirmwareIntel Xeon E3-1585Intel Core I5-8500TIntel Core I5-9600K FirmwareIntel Core I3-6100Te FirmwareIntel Xeon E3-1225 FirmwareIntel Xeon E3-1535MIntel Core I7-1060G7 FirmwareIntel Core I5-9400F FirmwareIntel Core I3-7367U FirmwareIntel Pentium Silver J5040Intel Pentium G4500Intel Core I3-7120 FirmwareIntel Xeon E3-1505M FirmwareIntel Core I7-6700Intel Core I7-7510U FirmwareIntel Core I9-8950Hk FirmwareIntel Pentium Gold G5420 FirmwareIntel Celeron N4000Intel Core I5-6500TeIntel Core I5-8400BIntel Pentium Silver J5005 FirmwareIntel Celeron G3900EIntel Core I5-7360U FirmwareIntel Core I3-7100U FirmwareIntel Celeron G3940 FirmwareIntel Celeron J4105Intel Core I7-8559U FirmwareIntel Core I3-6120 FirmwareIntel Core I7-8670 FirmwareIntel Core 4205UIntel Core I5-6440Hq FirmwareIntel Core I7-7600U FirmwareIntel Xeon E-2146G FirmwareIntel Celeron J4125 FirmwareIntel Core I5-7440Hq FirmwareIntel Core I5-7500T FirmwareIntel Core I3-7102EIntel Core I5-8400TIntel Core I3-7101TeIntel Xeon E-2136Intel Core I7-9750Hf FirmwareIntel Xeon E-2286MIntel Core I5-8420T FirmwareIntel Core I5-9300HIntel Core I7-8750HIntel Xeon E-2124Intel Celeron G3900TIntel Celeron N4100Intel Core I5-8265U FirmwareIntel Core I5-9600KfIntel Core I7-6820HqIntel Core I7-6650UIntel Xeon E-2288G FirmwareIntel Core I3-6102E FirmwareIntel Core I9-9880H FirmwareIntel Core I7-10610UIntel Pentium G4400Te FirmwareIntel Core I7-8559UIntel Core I7-6920Hq FirmwareIntel Core M7-6Y75Intel Core I3-8000Intel Celeron G3902E FirmwareIntel Core 5405U FirmwareIntel Core I5-8250UIntel Pentium Silver J5040 FirmwareIntel Core I5-7260UIntel Core I5-8600Intel Core I7-7567UIntel Core I5-6600TIntel Core I5-9400 FirmwareIntel Core I7-1065G7Intel Core I3-6102EIntel Core I3-7102E FirmwareIntel Core I5-7267UIntel Core I5-8500T FirmwareIntel Core I7-7660U FirmwareIntel Xeon E3-1230Intel Core I5-6400 FirmwareIntel Celeron 3855U FirmwareIntel Core I5-6260UIntel Core I7-9750HfIntel Pentium G4540Intel Core I7-6600U FirmwareIntel Core I5-9600KIntel Core I5-8310Y FirmwareIntel Core I3-7130UIntel Core I7-8700T FirmwareIntel Core I3-7340Intel Core I9-10900 FirmwareIntel Core I3-6320 FirmwareIntel Core I7-8700 FirmwareIntel Core I7-6820EqIntel Core I3-6100T FirmwareIntel Core I5-7300HqIntel Xeon E-2146GIntel Core I7-6700K FirmwareIntel Core I7-7820HqIntel Core I5-7260U FirmwareIntel Pentium Gold G5500TIntel Pentium Silver N5030Intel Xeon E3-1585LIntel Core I5-6200U FirmwareIntel Pentium Silver N5000Intel Xeon E3-1245 FirmwareIntel Core I3-1000G4Intel Celeron G3900T FirmwareIntel Xeon E3-1220Intel Core I3-1000G1Intel Core I3-6320T FirmwareIntel Core I7-6870Hq FirmwareIntel Core I9-8950HkIntel Celeron N4020Intel Core I7-9850HIntel Core I5-7210UIntel Core M3-7Y30Intel Core I3-8109U FirmwareIntel Pentium Gold G5500T FirmwareIntel Core I3-8020 FirmwareIntel Celeron J4005 FirmwareIntel Xeon E3-1220 FirmwareIntel Core I7-7700 FirmwareIntel Xeon E-2486GIntel Core I7-7820EqIntel Core 4205U FirmwareIntel Core I5-6500Intel Core I5-8500BIntel Pentium Silver N5030 FirmwareIntel Core I3-7130U FirmwareIntel Pentium G4520Intel Core I5-6600 FirmwareIntel Core I5-8200Y FirmwareIntel Core I7-7Y75 FirmwareIntel Xeon E3-1240LIntel Core I7-8670Intel Celeron G4900T FirmwareIntel Core I7-6970Hq FirmwareIntel Pentium Gold G5400Intel Xeon E-2278G FirmwareIntel Core I5-7600K FirmwareIntel Core I7-8650U FirmwareIntel Xeon E3-1575MIntel Celeron 3955UIntel Celeron 3865U FirmwareIntel Core I3-7101E FirmwareIntel Core I5-6200UIntel Core I9-9900K FirmwareIntel Xeon E-2134Intel Pentium 4410Y FirmwareIntel Celeron G4900Intel Core I5-8210YIntel Core I3-10100F FirmwareIntel Core I5-8650K FirmwareIntel Core M7-6Y75 FirmwareIntel Core I7-6770HqIntel Core I7-7920Hq FirmwareIntel Core I3-8100HIntel Core I5-8600TIntel Xeon E-2176MIntel Core I7-8510Y FirmwareIntel Core I3-8300T FirmwareIntel Core I5-1035G4Intel Core I3-7100E FirmwareIntel Core M5-6Y57 FirmwareIntel Celeron G3900 FirmwareIntel Core I3-6110UIntel Core M3-8100Y FirmwareIntel Core I5-7360UIntel Xeon E3-1545M FirmwareIntel Core I5-8400HIntel Core I3-8100T FirmwareIntel Pentium Gold G5400 FirmwareIntel Core I3-8300 FirmwareIntel Core I5-8550 FirmwareIntel Core I5-7500 FirmwareIntel Core I5-6500TIntel Celeron G4920 FirmwareIntel Core I5-8400T FirmwareIntel Pentium Gold G5600Intel Pentium G4400T FirmwareIntel Core I3-7101Te FirmwareIntel Core I7-7660UIntel Core I5-6300HqIntel Core I5-7200UIntel Core I3-6100EIntel Xeon E-2286M FirmwareIntel Core I8130U FirmwareIntel Core I5-7600KIntel Core I7-8700BIntel Pentium Gold G5500Intel Core 5405UIntel Core I5-8269U FirmwareIntel Core I3-10100FIntel Core I5-6350Hq FirmwareIntel Core M3-6Y30Intel Core I3-7340 FirmwareIntel Core I3-6320TIntel Pentium G4500T FirmwareIntel Celeron N4120Intel Core I5-9400HIntel Core I3-6120T FirmwareIntel Core I3-1005G1 FirmwareIntel Core I5-7210U FirmwareIntel Core I7-6970HqIntel Celeron 3965Y FirmwareIntel Core I5-6350HqIntel Pentium G4420TIntel Core I5-7300U FirmwareIntel Core I7-8700TIntel Core M3-6Y30 FirmwareIntel Core I7-7500UIntel Pentium Gold G5420T FirmwareIntel Core I3-1005G1Intel Core I3-1000G4 FirmwareIntel Core I5-8400 FirmwareIntel Core I7-6700TeIntel Pentium Gold G5420Intel Core I5-6360U FirmwareIntel Core I5-7442Eq FirmwareIntel Core I5-6442EqIntel Pentium Gold G5400TIntel Xeon E3-1505MIntel Core I3-6100U FirmwareIntel Core I5-8350UIntel Core I7-8709GIntel Celeron G3900Te FirmwareIntel Celeron N4000 FirmwareIntel Celeron G3930TeIntel Core I7-7600UIntel Core I7-8650UIntel Xeon E-2124GIntel Core I5-6267U FirmwareIntel Core I7-6560UIntel Core I5-7600Intel Core I5-7400TIntel Core M3-7Y30 FirmwareIntel Core I3-6100UIntel Xeon E-2278GIntel Core I7-7700HqIntel Core I5-8305GIntel Pentium G4400Intel Core I3-7120TIntel Celeron G3920Intel Core I3-7100H FirmwareIntel Core I7-6920HqIntel Core I7-6500U FirmwareIntel Core I5-8365U FirmwareIntel Pentium 4410YIntel Core I5-6400Intel Core I7-7Y75Intel Core I7-8565UIntel Core I5-8420 FirmwareIntel Pentium Gold G5420TIntel Core I5-7440HqIntel Pentium G4400TeIntel Celeron G3930Te FirmwareIntel Core I5-6500Te FirmwareIntel Celeron G3930EIntel Xeon E-2124 FirmwareIntel Xeon E-2278Gel FirmwareIntel Core I3-7101EIntel Core I3-8145UIntel Core I5-8400Intel Core I3-6300T FirmwareIntel Xeon E3-1565L FirmwareIntel Core I3-6167UIntel Core I5-1030G7 FirmwareIntel Core I5-7Y57 FirmwareFedoraproject FedoraIntel Core I5-7500Intel Celeron 3965YDebian Debian LinuxIntel Core I3-6300Intel Core I7-6820Hk FirmwareIntel Core I5-8200YIntel Xeon E3-1275 FirmwareIntel Core I5-8305G FirmwareIntel Celeron 3865UIntel Core I7-10710UIntel Core I5-8650 FirmwareIntel Core I5-7287UIntel Xeon E3-1501LIntel Core I3-8300TIntel Celeron J4005Intel Core I7-6700KIntel Core I5-8250U FirmwareIntel Core I5-8600K FirmwareIntel Celeron 3965UIntel Core M5-6Y57Intel Pentium G4420Intel Xeon E3-1578L FirmwareIntel Xeon E3-1225Intel Pentium Gold G5400T FirmwareIntel Core I3-7110UIntel Core I7-8700B FirmwareIntel Core I5-7400Intel Xeon E3-1280 FirmwareIntel Core I5-7500U FirmwareIntel Core I7-8550U FirmwareIntel Core I7-7567U FirmwareIntel Xeon E3-1240 FirmwareIntel Core M3-8100YIntel Core I3-8000 FirmwareIntel Xeon E3-1268LIntel Pentium 4405UIntel Pentium Silver J5005Intel Core I5-8420Intel Celeron G4900TIntel Core I5-6360UIntel Core I7-8565U FirmwareIntel Celeron J4125Intel Pentium Gold G5500 FirmwareIntel Core I3-7367UIntel Xeon E-2176G FirmwareIntel Core I7-7820HkIntel Core I3-6320Intel Core I7-8670T FirmwareIntel Xeon E-2174G FirmwareIntel Core I5-6267UIntel Core I3-8120Intel Pentium 4405U FirmwareIntel Xeon E-2176GIntel Core I7-10610U FirmwareIntel Core I5-8500B FirmwareIntel Core I5-6300Hq FirmwareIntel Core I3-6100H FirmwareIntel Core I5-8600KIntel Core I3-6120TIntel Xeon E3-1585L FirmwareIntel Core I7-6820HkIntel Core I5-7267U FirmwareIntel Core M5-6Y54Intel Pentium 4415U FirmwareIntel Core I7-8705GIntel Xeon E-2486G FirmwareIntel Core I7-8510YIntel Core I5-8500Intel Core I3-7020UIntel Core I7-6700 FirmwareIntel Core I5-1030G4 FirmwareIntel Core I5-1035G1 FirmwareIntel Core I5-6600T FirmwareIntel Core I9-9900KfIntel Core I7-10710U FirmwareIntel Core I3-8109UIntel Core I7-6820Eq FirmwareIntel Core I5-6440Eq FirmwareIntel Core I7-7560UIntel Pentium 4415YIntel Xeon E3-1515M FirmwareIntel Core I7-6600UIntel Celeron G3920TIntel Xeon E3-1505L FirmwareIntel Core I7-8500Y FirmwareIntel Xeon E-2288GIntel Celeron N4020 FirmwareIntel Pentium G4520T FirmwareIntel Core I5-6500 FirmwareIntel Xeon E3-1240Intel Core I7-6700HqIntel Core I5-7400 FirmwareIntel Core I3-8100TIntel Core I3-7100UIntel Core I3-7007U FirmwareIntel Core I5-6600KIntel Core I3-6300TIntel Core I3-7320TIntel Core I5-9400FIntel Core I7-6510U FirmwareIntel Xeon E-2186GIntel Core I3-8020Intel Core I7-7820Hk FirmwareIntel Core I5-6210U FirmwareIntel Core I9-9900Kf FirmwareIntel Core I3-6300 FirmwareIntel Core I9-9980HkIntel Xeon E3-1575M FirmwareIntel Core I5-6600K FirmwareIntel Core I5-8650KIntel Xeon E-2278Ge FirmwareIntel Core I7-9700KfIntel Core I3-6100Intel Core I5-7300Hq FirmwareIntel Celeron G4900 FirmwareIntel Xeon E3-1270Intel Core I7-8665UIntel Core I3-6100TeIntel Core I5-8269UIntel Celeron G3902EIntel Xeon E-2126G FirmwareIntel Core I5-1035G7Intel Core I7-8665U FirmwareIntel Core I3-8100H FirmwareIntel Xeon E3-1585 FirmwareIntel Core I7-7700Intel Core I5-1030G7Intel Celeron G3900Intel Xeon E3-1545MIntel Pentium G4520 FirmwareIntel Core I7-8550UIntel Pentium G4400 FirmwareIntel Core I7-7700Hq FirmwareIntel Celeron J4025Intel Core I7-6500UIntel Core I7-8850HIntel Core I5-8300HIntel Celeron N4120 FirmwareIntel Celeron N4100 FirmwareIntel Core I7-1060G7Intel Core I8350KIntel Core I7-7500U FirmwareIntel Core I5-8420TIntel Core I7-6510UIntel Core I7-6870HqIntel Xeon E-2136 FirmwareIntel Core I5-1035G1Intel Xeon E3-1268L FirmwareIntel Core I7-9700Kf FirmwareIntel Core I7-7700KIntel Pentium 4415UIntel Xeon E3-1501M FirmwareIntel Core I7-6567U FirmwareIntel Core I7-8700Intel Core I7-8809GIntel Core I7-8750H FirmwareIntel Core I7-7920HqIntel Core I9-9900KIntel Xeon E-2186G FirmwareIntel Core I7-6700Te FirmwareIntel Pentium 4405Y FirmwareIntel Core I5-7600T FirmwareIntel Xeon E-2278GelIntel Celeron G4920Intel Xeon E-2144GIntel Core I5-1030G4Intel Xeon E3-1260L FirmwareIntel Core I5-6210UIntel Core I5-8650Intel Core I7-6700Hq FirmwareIntel Pentium 4415Y FirmwareIntel Core I3-6167U FirmwareIntel Celeron G3920 FirmwareIntel Xeon E3-1235L FirmwareIntel Celeron G3900TeIntel Core I5-6310U FirmwareIntel Core I5-8259U FirmwareIntel Core I7-7510UIntel Core I5-7Y54 FirmwareIntel Core I3-7120T FirmwareIntel Core I7-6770Hq FirmwareIntel Core I7-9850H FirmwareIntel Core I3-6100HIntel Celeron G3930E FirmwareIntel Pentium G4400TIntel Xeon E3-1245Intel Xeon E3-1501MIntel Core I5-9400H FirmwareIntel Core I7-6822EqIntel Core I7-6700T FirmwareIntel Celeron G3920T FirmwareIntel Xeon E-2144G FirmwareIntel Core I7-9700K FirmwareIntel Xeon E3-1260LIntel Core I3-6110U FirmwareIntel Pentium Gold G5600 FirmwareIntel Core I5-8400H FirmwareIntel Core I9-9980Hk FirmwareIntel Core I7-8809G Firmware

Weaknesses

CWE-203

CVSS scores

v3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
v2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

Potentially impacted assets

See if this affects your attack surface

Latest trending attack

Criticalyesterday

Google Brotli decoder - Remote Code Execution via compressed requests (Exploitation Check)

This control is the second step of the Patrowl response to CVE-2026-111497 (Node2Shell). It complements the first control of 22 October 2026, which focused on the Node.js runtime, and does not replace it. Why a second control CVE-2026-111497 is an out-of-bounds write in the Google Brotli decoder, the library that decompresses Brotli ("br") data. It was first published as a Node.js vulnerability, because Node.js bundles this decoder. Later publications showed that the flaw is in the library itself. Every product that embeds an affected version of the decoder is concerned, whatever its language or vendor. A public proof of concept demonstrates code execution. Any server that decompresses request bodies sent with "Content-Encoding: br" exposes the decoder to unauthenticated attackers. Known cases include Express 5 and NestJS 11 on Node.js, Koa and Fastify setups, Bun, Envoy and Istio with request decompression enabled, and any application or reverse proxy that decodes Brotli request bodies with an affected library. The flaw also works in the other direction. A malicious server can compromise an unpatched client that decodes a Brotli response, for example Node.js fetch(), Python clients (requests, httpx, aiohttp, Scrapy) with the Brotli or brotlicffi package, or libcurl builds with Brotli support. What this control checks Patrowl sends small, valid Brotli-compressed requests to each asset and observes whether the server decodes them. The check does not depend on the technology: it detects the behaviour, whatever the stack behind it. These requests are what any legitimate client could send. They never reach the vulnerable code path and cannot affect the availability of the service. How to read the result Potentially impacted means the asset decodes Brotli request bodies: the attack surface is exposed. It does not confirm that the asset is vulnerable. The version of the Brotli decoder in use is not visible from the outside. This check covers applications that parse request bodies on their root path. A Not impacted result does not rule out exposure on other routes, nor on the client side. Checking the versions on the servers remains the only exhaustive verification. Affected and fixed versions Google Brotli 1.0.3 to 1.2.0 are affected, fixed in 1.0.10, 1.1.1 and 1.2.1. Fixed releases of the main products embedding it: Node.js 22.23.4, 24.22.1 and 26.12.1 (end-of-life lines 20.x and older and 25.x receive no fix), Bun 1.4.4, Envoy 1.37.8, 1.38.6, 1.39.3 and 1.40.0, Istio 1.29.9, 1.30.6 and 1.31.2, Python Brotli 1.2.1 and brotlicffi 1.2.1.0. Products that link against the system library depend on the Brotli package of the Linux distribution. Recommendations Update every component that embeds the Brotli decoder (only real fix). Start with the assets flagged by this control. Restart the processes after the update. Rebuild containers, single-executable applications and appliances that bundle an affected runtime or library. Reduce the exposure until the update is deployed. Reject requests with "Content-Encoding: br" at the reverse proxy, load balancer or WAF, case-insensitively and including lists such as "gzip, br". On Envoy and Istio, disable request decompression for Brotli. Review outbound calls. List the features that fetch content from servers you do not control, and patch the services that host them first.

CVE-2020-8695

Technologies

Weaknesses

CVSS scores

MITRE ATT&CK

References

Potentially impacted assets

Latest trending attack

Google Brotli decoder - Remote Code Execution via compressed requests (Exploitation Check)

Our latest news

PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)

Manage External Security Across All Your Entities

Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34

Take 15 minutes to discover our platform with our experts