6196 matches found
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Intel Microcode vulnerabilities (USN-5486-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5486-1 advisory. It was discovered that some Intel processors did not implement sufficient control flow management. A local attacker could use thi...
HPESBHF04322 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant DX190r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant...
HPESBHF04326 rev.3 - HPE Superdome Flex, Superdome Flex 280, Integrity MC990 X, and SGI UV 300 Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server - Prior to 5.2.16 BIOS in product bundle 2022.06 HPE Superdome Flex Server - Prior to 3.55.8 HPE Superdome Flex 280 Server - Prior to 1.35.12 SG...
HPESBST04321 rev.1 - Certain HPE Storage Products Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1460 Storage - Prior to 2.6605172022 - Use BIOS family U32. HPE StoreEasy 1560 Storage - Prior to 2.6605172022 - Use BIOS family U33. HPE StoreEasy 1660 Expand...
HPESBHF04325 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to System BIOS 1.6006012022 HPE Synergy 480 Gen10 Compute Module - Prior to System BIOS 2.6606012022 HPE Synergy 660 Gen10...
HPESBHF04307 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Processors, INTEL-SA-00615, 2022.1 IPU - Intel Processors MMIO Stale Data Advisory, Multiple Local Vulnerabilities
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to H051.9205182022 HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m710x-L Server Blade - Prior to...
NVIDIA DGX 输入验证错误漏洞
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. The NVIDIA DGX A100 suffers from an input validation error vulnerability that stems from an integer overflow in the SBIOS in SmmCore. An attacker could exploit the vulnerability by passing specially crafted...
NVIDIA DGX 缓冲区错误漏洞
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. The NVIDIA DGX A100 suffers from a buffer error vulnerability that originates from accessing an uninitialized pointer to SBIOS in Ofbd. An attacker could exploit this vulnerability to execute arbitrary code o...
NVIDIA DGX 缓冲区错误漏洞
The Nvidia NVIDIA DGX is a high-performance workstation for deep learning applications from Nvidia, USA. A buffer error vulnerability exists in NVIDIA DGX A100 Servers prior to version 22.5.5, which stems from a boundary error when handling untrusted input in SBIOS in BiosCfgTool, and is exploite...
HPESBHF04315 rev.1 - HPE Superdome Flex Servers Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU - Intel Xeon Advisory, Multiple Local Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to 3.55.8 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21131 |...
SUSE SLED15 / SLES15 Security Update : kernel-firmware (SUSE-SU-2022:1923-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1923-1 advisory. - Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO...
Conti Leaks Reveal Ransomware Gang's Interest in Firmware-based Attacks
An analysis of leaked chats from the notorious Conti ransomware group earlier this year has revealed that the syndicate has been working on a set of firmware attack techniques that could offer a path to accessing privileged code on compromised devices. "Control over firmware gives attackers...
Vulnerabilities fixed in HPE ProLiant Intel BIOS
Vulnerabilities have been fixed in the Intel BIOS of HPE ProLiant DX servers. The vulnerabilities in DX Gen 10 servers with features DX170r, DX190r, DX360, DX380, DX560 and DX4200 allow a local malicious person able to obtain sensitive information or increase privileges. HPE has made updates...
Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85080)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...
Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85079)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...
CVE-2022-24418
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
CVE-2022-24418
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
CVE-2022-24417
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
CVE-2022-24417
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
Input validation
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...