CVE-2020-8722: Buffer Copy without Checking Size of Input

Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8731: Incorrect Permission Assignment for Critical Resource

Incorrect execution-assigned permissions in the file system for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8715: Release of Invalid Pointer or Reference

Invalid pointer for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable denial of service via local access...

CVE-2020-8709: Improper Authentication

Improper authentication in socket services for some IntelR Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

Intel is warning of a rare critical-severity vulnerability affecting several of its motherboards, server systems and compute modules. The flaw could allow an unauthenticated, remote attacker to achieve escalated privileges. The recently patched flaw CVE-2020-8708 ranks 9.6 out of 10 on the CVSS...

SUSE-SU-2020:2200-1 Security update for google-compute-engine

This update for google-compute-engine fixes the following issues: - Do not add the created user to the adm CVE-2020-8903, docker CVE-2020-8907, or lxd CVE-2020-8933 groups if they exist bsc1173258. - Don't enable and start google-network-daemon.service when it's already installed bsc1169978...

Intel® Server Boards, Server Systems and Compute Modules Advisory

Summary: Potential security vulnerabilities in some Intel® Server Boards, Server Systems and Compute Modules may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8708...

PT-2020-4117

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a heap-based overflow that may allow an authenticated user to potentially enable escalation of privilege via local access. It ...

PT-2020-4349

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a lack of input data sanitization measures in the software of some Intel Server Boards, Server Systems, and Compute Modules...

PT-2020-4113

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-4346

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer overflow due to the lack of input size validation, which may allow a privileged user to potentially enable escalation...

PT-2020-4116

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to incorrect execution-assigned permissions in the file system. This may allow an authenticated user to potentially enable...

PT-2020-4118

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper authentication in some Intel products, which may allow an unauthenticated user to potentially enable escalation of...

PT-2020-4115

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer overflow due to the lack of input size validation, which could allow a remote attacker to escalate their privileges...

PT-2020-4364

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue exists due to improper input validation in a subsystem, which may allow an authenticated user to potentially enable denial of service via...

PT-2020-4350

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to inadequate authentication in the socket services of Intel's microcode for server boards, server systems, and compute modules...

PT-2020-4344

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 2.45 Description: The issue is related to a buffer overflow in a verification process, which may allow an authenticated user to potentially enable escalation of privile...

PT-2020-4352

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer copy without checking the size of the input, which may allow an authenticated user to potentially enable escalation o...

PT-2020-4366

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper access control in some Intel Server Boards, Server Systems, and Compute Modules. This may allow an authenticated user...

PT-2020-4365

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper authentication in some Intel Server Boards, Server Systems, and Compute Modules, which may allow an authenticated use...