Intel Integrated Performance Primitives (IPP) Information Disclosure - US

Lenovo Security Advisory: LEN-25662

Potential Impact: Information disclosure

Severity: Moderate

Scope of Impact: Industry-wide

CVE Identifier: CVE-2018-12155

Summary Description:

Intel has notified Lenovo of a potential security vulnerability in Intel IPP may allow data leakage in cryptographic libraries by an authenticated user.

Mitigation Strategy for Customers (what you should do to protect yourself):

Intel recommends upgrading to the Intel IPP version (or newer) indicated for your model in the Product Impact section below.

Product Impact: