Intel® Processor Diagnostic Tool Advisory

Summary: A potential security vulnerability in some Intel® Processor Diagnostic Tool software may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21831 Description: Uncontrolled search path in some Intel®...

Intel® Processor Identification Utility Software Advisory

Summary: Potential security vulnerability in some Intel® Processor Identification Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21774 Description: Uncontrolled search path i...

RHEL 5 : hw (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 - hw: Fast forward store predictor CVE-2020-869...

2024.1 IPU - Intel® Processor Return Predictions Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing a firmware update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-38575 Description: Non-transparent sharing of return predictor targets...

HPESBHF04608 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Using Certain Intel Processors, INTEL-SA-00972, 2024.1 IPU - Intel Processor Bus Lock Advisory, Remote Denial of Service Vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen11 - Prior to v1.4401-18-2024 HPE ProLiant MicroServer Gen11 - Prior to v1.4401-18-2024 HPE ProLiant ML30 Gen11 - Prior to v1.4401-18-2024 CVSS Scores: | C...

HPESBHF04607 rev.1 - Certain HPE ProLiant DL/DX Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v2.0002-22-2024 HPE ProLiant DL360 Gen10 Plus server - Prior to v2.0003-06-2024 HPE ProLiant DL380 Gen10 Plus server -...

2024.1 IPU - Intel® Processor Bus Lock Advisory

Summary: A potential security vulnerability in the bus lock regulator mechanism for some Intel® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-39368 Description: Protection mechanism...

2024.1 IPU - BIOS Advisory

Summary: A potential security vulnerability in BIOS firmware for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-32282 Description: Race condition in BIOS firmware for some...

HPESBHF04606 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Using Certain Intel Processors, INTEL-SA-00898, 2024.1 IPU - Intel Atom Processor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen11 - Prior to v1.4401-18-2024 HPE ProLiant ML30 Gen11 - Prior to v1.4401-18-2024 HPE ProLiant MicroServer Gen11 - Prior to v1.4401-18-2024 CVSS Scores: ...

HPESBHF04609 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Servers Using Certain Intel Processors, INTEL-SA-00982, 2024.1 IPU - Intel Processor Return Predictions Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant MicroServer Gen11 - Prior to v1.4401-18-2024 HPE ProLiant DL20 Gen11 - Prior to v1.4401-18-2024 HPE ProLiant ML30 Gen11 - Prior to v1.4401-18-2024 CVSS Scores: ...

HPESBHF04613 rev.1 - Certain HPE Apollo/XL Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to v2.0002-22-2024 HPE ProLiant XL220n Gen10 Plus Server - Prior to v2.0002-22-2024 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

The vulnerability of Intel SGX DCAP microprogramming software arises from insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Intel SGX DCAP microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CLSA-2023-1701444720 microcode_ctl: Fix of 4 CVEs

Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2022-40982 INTEL-SA-00828, CVE-2022-41804 INTEL-SA-00837, CVE-2023-23908 INTEL-SA-00836, CVE-2023-23583 INTEL-SA-00950: - Addition of 06-9a-04/0x40 microcode in 06-9a-04 at revision 0x5; - Addition of 06-ba-02/0xe0 microcode...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

Debian DSA-5563-1 : intel-microcode - security update

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5563 advisory. - Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of...

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical core...

HPESBHF04554 rev.1 - Certain HPE Edgeline Servers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to 1.7810-31-2023 HPE Edgeline e920 Server Blade - Prior to 1.7810-31-2023 HPE Edgeline e920d Server Blade - Prior to 1.7810-31-2023...

HPESBHF04557 rev.1 - Certain HPE Apollo,XL Servers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.9010-19-2023 HPE Apollo 4200 Gen10 Plus System - Prior to 1.9010-19-2023 HPE...

Fedora 38 : microcode_ctl (2023-3dfc0123b0)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-3dfc0123b0 advisory. - Update to upstream 2.1-42. 20231114 - Update of 06-6a-06/0x87 ICX-SP D0 microcode from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 ICL-D ...

CVE-2023-25756

The CVE-2023-25756 issue affects Intel BIOS firmware across multiple processors, caused by an out-of-bounds read that may allow an authenticated user to escalate privileges via adjacent access. Documents from Intel (INTEL-SA-00924) confirm the vulnerability in BIOS software and propose updates to...