PT-2023-13012 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to a use after free in the BIOS firmware for some IntelR Processors, which may allow a privileged user to potentially enable escalation of privilege via local...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-33164 Description: Improper access control i...

Intel Processors 输入验证错误漏洞

Intel Processors are U.S. Intel Corporation's provide for interpreting computer instructions and processing data in computer software. A security vulnerability exists in the IntelR Processors BIOS firmware that originates from an incorrect input validation contained in the firmware, which can be...

PT-2023-13060 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper initialization in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via...

PT-2023-12886 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege v...

CVE-2021-0187

CVE-2021-0187 is an Intel BIOS firmware vulnerability caused by improper access control, potentially enabling privilege escalation via local access. Affected are some Intel processors; exploitation is local with high privileges required and can impact confidentiality, integrity, and availability ...

CVE-2021-0187

Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2022-40080

Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges...

CVE-2022-40080

CVE-2022-40080 affects the Aspire E5-475G BIOS firmware, specifically the FpGui module. The vulnerability arises from a second call to the GetVariable service, which can be exploited in the UEFI DXE phase to allow a local attacker to execute arbitrary code and escalate privileges. The available d...

CVE-2022-40080

Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.10.52 security update

Red Hat OpenShift Container Platform release 4.10.52 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...

SUSE CVE-2017-17083

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer...

SUSE CVE-2019-14558

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

SUSE CVE-2020-12944

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...

SUSE CVE-2021-0158

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

SUSE CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

2023.1 IPU - Intel® Xeon® Processor Advisory

Summary: A potential security vulnerability in some Intel® Xeon® Processors with Intel® Software Guard Extensions SGX may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-33196 Description: Incorrec...

Dell PowerEdge Server BIOS Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. Dell PowerEdge Server BIOS buffer overflow vulnerability, which stems from a SMM communication buffer validation error. A local attacker with elevated privileges could exploit this vulnerability to perform arbitrar...

The vulnerability of the BIOS component of AMD processors allows a hacker to trigger a system failure.

The vulnerability of the BIOS component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...