194 matches found
USN-4385-1 intel-microcode vulnerabilities
It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processor cores. A local attacker could use th...
Moderate: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
Updated microcodectl packages that fix several security bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 6 : microcode_ctl (RHSA-2020:2433)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2433 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: hw: Special Register Buffer Data Sampling...
Intel Processors Side Channel Data Leakage Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-30044 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0548, CVE-2020-0549, CVE-2020-0550 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that may allow...
Intel Processors Side Channel Data Leakage Vulnerabilities - Lenovo Support US
No description provided...
New 'CacheOut' Attack Leaks Data from Intel CPUs, VMs and SGX Enclave
Another month, another speculative execution vulnerability found in Intel processors. If your computer is running any modern Intel CPU built before October 2018, it's likely vulnerable to a newly discovered hardware issue that could allow attackers to leak sensitive data from the OS kernel,...
CVE-2020-0549
creationtimestamp| type| source ---|---|--- 2020-01-28 08:37:51+00:00| seen| https://t.me/cveNotify/502 2020-01-28 10:30:18+00:00| published-proof-of-concept| https://t.me/cybershit/663 2020-01-29 20:11:34+00:00| seen| https://t.me/thehackernews/585 2020-01-31 10:14:26+00:00| seen|...
CVE-2020-0549
Cleanup errors in some data cache evictions for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2020-0549
CVE-2020-0549 relates to cleanup errors in Intel CPU data cache eviction handling, enabling potential information disclosure from local access. Publicly documented fixes target Intel microcode updates (e.g., SRBDS/L1D eviction sampling issues) and are distributed via microcode_ctl packages and ve...
CVE-2020-0549
Cleanup errors in some data cache evictions for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
UBUNTU-CVE-2020-0549
Cleanup errors in some data cache evictions for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2019-0549
creationtimestamp| type| source ---|---|--- 2019-01-09 14:53:48+00:00| seen| MISP/5c360a14-9018-4d13-b6c9-714c0a021402...
Microsoft Windows Multiple Vulnerabilities (KB4480961)
This host is missing a critical security update according to Microsoft KB4480961 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Information disclosure
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,...
Information disclosure
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,...
CVE-2019-0549
CVE-2019-0549 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 (and corresponding Server editions such as Server 2012/2012 R2, 2016, 2019). F...
KB4480964: Windows 8.1 and Windows Server 2012 R2 January 2019 Security Update
The remote Windows host is missing security update 4480964 or cumulative update 4480963. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited...
KB4480961: Windows 10 Version 1607 and Windows Server 2016 January 2019 Security Update
The remote Windows host is missing security update 4480961. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...
Microsoft Windows Kernel CVE-2019-0549 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
KB4480960: Windows 7 and Windows Server 2008 R2 January 2019 Security Update
The remote Windows host is missing security update 4480960 or cumulative update 4480970. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited...