Lucene search

K
freebsdFreeBSD5AFD64AE-122A-11EF-8EED-1C697A616631
HistoryMay 14, 2024 - 12:00 a.m.

Intel CPUs -- multiple vulnerabilities

2024-05-1400:00:00
vuxml.freebsd.org
5
intel
cpus
vulnerabilities
tdx module
software
escalation of privilege
input validation
firmware
updates
processors
information disclosure
race conditions
microcode
core ultra processors
denial of service
instructions
unexpected behavior

7.9 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Intel reports:

  Potential security vulnerabilities in some Intel Trust Domain
  Extensions (TDX) module software may allow escalation of
  privilege. Improper input validation in some Intel TDX module
  software before version 1.5.05.46.698 may allow a privileged user to
  potentially enable escalation of privilege via local access.  Intel
  is releasing firmware updates to mitigate these potential
  vulnerabilities.
 



  A potential security vulnerability in some Intel Processors may
  allow information disclosure.  Hardware logic contains race
  conditions in some Intel Processors that may allow an authenticated
  user to potentially enable partial information disclosure via local
  access. Intel is releasing microcode updates to mitigate this
  potential vulnerability.
 



  A potential security vulnerability in Intel Core Ultra Processors
  may allow denial of service.  Sequence of processor instructions
  leads to unexpected behavior in Intel Core Ultra Processors may
  allow an authenticated user to potentially enable denial of service
  via local access.  Intel is releasing microcode updates to mitigate
  this potential vulnerability.
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchcpu-microcode-intel< 20240514UNKNOWN

7.9 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%