PT-2024-27248

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The current implementation of the fpga manager in the Linux kernel assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module's...

CVE-2023-6068

On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some...

CVE-2023-6068

On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some...

Design/Logic Flaw

On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some...

CVE-2023-6068 On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some

On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some...

CVE-2023-6068 On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some

On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some...

CVE-2023-6068

CVE-2023-6068 affects Arista MOS-based 7130 Series FPGA devices running MultiAccess FPGA software version 1.7.1 or 1.6.x. The issue is that applying ACLs may cause incorrect ACL operation on a port, allowing some packets that should be denied and denying some that should be allowed. Arista provid...

PT-2024-14873 · Unknown · 7130 Series Fpga

Name of the Vulnerable Software and Affected Versions: 7130 Series FPGA platforms affected versions not specified Description: The issue affects the operation of Access Control Lists ACLs on the configured ports of the 7130 Series FPGA platforms. When ACLs are applied, some packets that should be...

PT-2024-8901 · Intel · Intel Fpga Sdk For Opencl

Name of the Vulnerable Software and Affected Versions: IntelR FPGA SDK for OpenCLTM affected versions not specified Description: The issue is related to an uncontrolled search path in some IntelR FPGA SDK for OpenCLTM software technology. This may allow an authenticated user to potentially enable...

Security Advisory 0091

Security Advisory 0091 . CSAF PDF Date: February 20, 2024 Revision | Date | Changes ---|---|--- 1.0 | February 20, 2024 | Initial release The CVE-ID tracking this issue: CVE-2023-6068 CVSSv3.1 Base Score: 3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Common Weakness Enumeration: CWE-283 Improper Access...

PT-2024-8891 · Intel · Intel Fpga

Name of the Vulnerable Software and Affected Versions: IntelR FPGA products versions prior to 24.1 Description: The issue is related to improper access control in the firmware of some IntelR FPGA products, which may allow a privileged user to enable escalation of privilege via local access. This ...

AMD UltraScale™/UltraScale+™ FPGA Series RSA Authentication

Bulletin ID: AMD-SB-8002 Potential Impact: Information Integrity Severity: Refer to the Summary section for details Summary Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams. CVE| Severity| CVE...

GTKWave VCD get_vartoken realloc use-after-free vulnerabilities

Talos Vulnerability Report TALOS-2023-1806 GTKWave VCD getvartoken realloc use-after-free vulnerabilities January 8, 2024 CVE Number CVE-2023-37576,CVE-2023-37577,CVE-2023-37573,CVE-2023-37578,CVE-2023-37575,CVE-2023-37574 SUMMARY Multiple use-after-free vulnerabilities exist in the VCD getvartok...

GTKWave FST LEB128 varint stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2023-1783 GTKWave FST LEB128 varint stack-based buffer overflow vulnerabilities January 8, 2024 CVE Number CVE-2023-35704,CVE-2023-35703,CVE-2023-35702 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of...

CVE-2023-22327

Out-of-bounds write in firmware for some IntelR FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access...

Information disclosure

Out-of-bounds write in firmware for some IntelR FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22327

Out-of-bounds write in firmware for some IntelR FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22327

Intel’s CVE-2023-22327 affects certain Intel® FPGA firmware (Agilex™ 7 and Stratix® 10 families). The root cause is an out-of-bounds write in the firmware before version 2.8.1, which may enable information disclosure by a privileged attacker with local access. Impact is confidentiality-focused (C...

CVE-2023-22327

Out-of-bounds write in firmware for some IntelR FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access...

Intel® FPGA Firmware Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00957.html...