Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20241112 release bsc1233313 CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enabl...

SUSE-SU-2024:3995-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

ucode-intel-20241112-1.1 on GA media (moderate)

ucode-intel-20241112-1.1 on GA media Announcement ID: openSUSE-SU-2024:14496-1 Rating: moderate Cross-References: CVE-2024-21820 CVE-2024-21853 CVE-2024-23918 CVSS scores: CVE-2024-21820 SUSE : 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N CVE-2024-21820 SUSE : 8.5...

SUSE CVE-2024-21820

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21820

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21820

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

sudo security update

RHEL 9.3.0.Z ERRATUM 1.9.5p2-10 - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21834 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21828 - CVE-2023-42465 sudo: Targeted Corruption of Register and...

Microsoft Windows Multiple Vulnerabilities (KB5022840)

This host is missing an important security update according to Microsoft KB5022840 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-21820

creationtimestamp| type| source ---|---|--- 2023-02-14 22:41:57+00:00| seen| https://t.me/cibsecurity/58168...

CVE-2023-21820

Windows Distributed File System DFS Remote Code Execution Vulnerability...

CVE-2023-21820

Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.

NVIDIA Data Center GPU Manager Remote Memory Corruption

!/usr/bin/python3 -- coding: UTF-8 -- heart.py NVIDIA Data Center GPU Manager Remote Memory Corruption Vulnerability Jeremy Brown jbrown3264/gmail NVIDIA DCGM runs on machines with NVIDIA GPUs to gather telemetry and GPU health data. nv-hostengine is a daemon that by default listens on the loopba...

CVE-2022-21820

CVE-2022-21820 affects NVIDIA Data Center GPU Manager (DCGM) specifically the nvhostengine component. The vulnerability arises from a hardware-daemon interaction where a network user can trigger error-condition handling without user action, potentially leading to limited code execution, some deni...

Security Bulletin: NVIDIA Data Center GPU Manager (DCGM) - March 2022

NVIDIA has released a software update for NVIDIA® Data Center GPU Manager DCGM. The update addresses security issues that may lead to code execution, denial of service, and escalation of privileges. To protect your system, download and install the latest DCGM release from the CUDA repositories. G...

CVE-2021-21820

creationtimestamp| type| source ---|---|--- 2021-07-16 14:27:59+00:00| seen| https://t.me/cibsecurity/26211 2021-07-18 05:01:26+00:00| seen| https://t.me/cyberbannewsir/3637...

CVE-2021-21820

TALOS-2021-1361 details a hard-coded credential and information-disclosure/remote-command-execution vulnerability in D-LINK DIR-3040 (1.13B03) within the WiFi Smart Mesh MQTT service. A specially crafted network packet to the MQTT service can trigger command execution, potentially compromising th...