CVE-2020-12927

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

CVE-2020-12927

CVE-2020-12927 concerns a vulnerability in a dynamically loaded AMD driver within the AMD VBIOS Flash Tool SDK. It could allow any authenticated user to escalate privileges to NT authority system (local privilege escalation with high impact). The available sources describe the affected component ...

CVE-2020-12912

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access...

CVE-2020-12912

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access...

CVE-2020-12912

CVE-2020-12912 describes an AMD Linux hwmon/RAPL issue where improper access control could let a local attacker observe power-usage data leading to side-channel information disclosure. AMD updated the RAPL interface to require privileged access, mitigating the vulnerability. Connected advisories ...

CVE-2020-12912

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access...

CVE-2020-12926

The CVE-2020-12926 entry describes a TPM-related issue where the TPM reference software may fail to properly track repeated failed shutdowns, potentially enabling a state that could expose confidential TPM key material. The attack is indicated to require physical access (power cycling) and could ...

CVE-2020-12912: Exposed Dangerous Method or Function

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access...

PT-2020-13325

Name of the Vulnerable Software and Affected Versions AMD VBIOS Flash Tool SDK affected versions not specified Description A potential issue in a dynamically loaded AMD driver in the AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

PT-2020-13323

Name of the Vulnerable Software and Affected Versions Linux affected versions not specified Description A potential issue in the AMD extension to the Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to conduct various side channel...

CVE-2020-12927: Exposed Dangerous Method or Function

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

About the security content of macOS Big Sur 11.0.1

About the security content of macOS Big Sur 11.0.1 This document describes the security content of macOS Big Sur 11.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Citrix Hypervisor Security Update

Description of Problem Two issues have been identified in Citrix Hypervisor that may, if exploited, allow privileged code in an HVM guest VM to compromise or crash the host. These issues only apply in specific configurations; furthermore, Citrix believes that there would be significant difficulty...

HPSBHF03704 rev. 3 - AMD® Firmware TPM November 2020 Security Update

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD Firmware TPM which may allow escalation of privilege...

AMD Graphics Driver Vulnerability - Lenovo Support US

No description provided...

AMD Energy Driver for Linux Vulnerability (RAPL) - Lenovo Support US

No description provided...

openSUSE Security Update : xen (openSUSE-2020-1844)

This update for xen fixes the following issues : - bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 - bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 - bsc1177413 - VUL-0: CVE-2020-27671: xen: undue...

Multi-vendor BIOS Security Vulnerabilities (November 2020) - Lenovo Support US

No description provided...

Fedora 32 : xen (2020-e3d619cc32)

x86: Race condition in Xen mapping code XSA-345 undue deferral of IOMMU TLB flushes XSA-346 unsafe AMD IOMMU page table updates XSA-347 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

SUSE-SU-2020:3049-1 Security update for xen

This update for xen fixes the following issues: - bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 - bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 - bsc1177413 - VUL-0: CVE-2020-27671: xen: undue...