295 matches found
Ubuntu 16.04 ESM : Intel Microcode vulnerabilities (USN-5535-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5535-1 advisory. Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could use this to obtain sensitive...
Buffer overflow
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to ...
USN-5486-1: Intel Microcode vulnerabilities
It was discovered that some Intel processors did not implement sufficient control flow management. A local attacker could use this to cause a denial of service. CVE-2021-0127 Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could u...
CVE-2021-33122
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
CVE-2022-21128
Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-33077
Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2021-33122
CVE-2021-33122 corresponds to Intel BIOS firmware issues affecting several Intel processors where insufficient control flow management in the BIOS authenticated code module may permit a privileged user to escalate privileges locally. The Intel advisory INTEL-SA-00601 documents this vulnerability ...
CVE-2021-33122
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
CVE-2021-33077
Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2022-21128
Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-21128
Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-21128
CVE-2022-21128 affects Intel® Advisor prior to version 7.6.0.37. The issue is insufficient control flow management that may allow an authenticated user to escalate privileges via local access. CVSSv3.1 metrics shown in the connected records indicate a local, low-privilege, non‑interactive vector ...
2020.2 IPU – Intel® CSME, SPS, TXE, and AMT Advisory
Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Dynamic Application Loader DAL, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel®...
CVE-2021-33122: Undefined Security Weakness
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
Intel Memory Bug Poses Risk for Hundreds of Products
Chipmaker Intel is reporting a memory bug impacting microprocessor firmware used in “hundreds” of products. According to an advisory issued by the company on Tuesday, the bug is firmware-based and rated as “high” risk with a Common Vulnerability Scoring System CVSS score of 7. The vulnerability...
Security Bulletin: Multiple Vulnerabilities in Intel Processors affect Cloud Pak System
Summary Multiple Vulnerabilities in Intel Processors affect Cloud Pak System. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2020-8700 DESCRIPTION: Intel Processors could allow a local authenticated attacker to gain elevated privileges on the system, caused...
CVE-2021-33061
A denial of service flaw was found in the Linux kernel due to insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters. This flaw allows a locally authenticated user to potentially cause a denial of service. The highest threat from this vulnerability is to syste...
Intel CPU vulnerability CVE-2021-0099
Insufficient control flow management in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. CVE-2021-0099 Impact An attacker may be able to exploit the Intel processor firmware to gain elevated access to...
Denial Of Service (DoS)
intel-microcode is vulnerable to denial of service DoS attacks. Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access...