2023.4 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege and/or information disclosure and/or denial of service via local access. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-235...

Intel NUC BIOS firmware security vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC BIOS firmware. An attacker exploiting this vulnerability could result in elevated privileges or information disclosure...

HPESBHF04552 rev.1 - Certain HPE ProLiant DL/ML and Microservers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 1.9010-19-2023 HPE ProLiant DL380 Gen10 Plus server - Prior to...

The vulnerability of Intel microprogramming software allows a hacker to elevate their privileges from the third level to the zero-level protection ring (CPL0), thereby gaining access to confidential information or causing service failures.

The vulnerability of Intel microprogramming software is related to errors in interpreting redundant prefixes. Exploiting this vulnerability can allow attackers to enhance their privileges from the third level to the zero-level protection ring, CPL0, gain access to confidential information, or cau...

F5 Networks BIG-IP : Intel processor vulnerability (K000133630)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000133630 advisory. - Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially...

HPESBNS04339 rev.1 - Certain HPE NonStop Products Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity NonStop BladeSystem NB56000c - Please refer to the entries for HPE NonStop Network and Storage CLIMs HPE Integrity NonStop NS2400 - Please refer to the entries...

HPESBHF04534 rev.2 - HPE Superdome Flex and Superdome Flex 280 Servers INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to v3.80.24 HPE Superdome Flex 280 Server - Prior to v1.60.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

Oracle Linux 5 : ELSA-2012-0721-1: / kernel (ELSA-2012-07211)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-07211 advisory. - The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solar...

The Bug Report – August 2023 Edition

The Bug Report – August 2023 Edition By Charles McFarland · September 06, 2023 Why am I here? Welcome back to The Bug Report, the hotter-than-hell Texas edition! For those still unfamiliar with our monthly escapades, every month our trusty Advanced Research Center vulnerability research team...

Ubuntu: Security Advisory (USN-6329-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6332-1: Linux kernel (Azure) vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 William Zhao discovered that the Traffic Control T...

Vulnerability of Intel processor BIOS microprogramming software, allowing attackers to enhance their privileges

The vulnerability of Intel processor BIOS microprogramming software is related to insufficient verification of data entered by users. Exploiting this vulnerability can allow attackers to enhance their privileges...

HPESBHF04463 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to OmniStack Firmware version 20230803 HPE SimpliVity 380 Gen10 G - Prior to OmniStack Firmware version 20230803 HP...

Intel BIOS firmware security vulnerability

Intel BIOS firmware is a set of programs from the U.S.-based Intel Corporation that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the IntelR Processors BIOS firmware that originates from improper initialization. An attacker could exploit t...

HPESBHF04512 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.8007-05-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-41804 |...

HPESBHF04513 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4510 Gen10 System - Prior to 2.9007-20-2023 HPE ProLiant XL230k Gen10 Server - Prior to 2.9007-20-2023 HPE ProLian...

HPESBHF04509 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.9007-20-2023 HPE Synergy 480 Gen10 Compute Module - Prior to 2.9007-20-20...

HPESBHF04526 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX380 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DX360 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DX220n Gen10 Plus server - Prior to...

HPESBHF04517 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 server - Prior to 2.9007-20-2023 HPE ProLiant DX380 Gen10 server - Prior to 2.9007-20-2023 HPE...

Intel 2023.3 IPU – BIOS August 2023 Security Updates

Intel has informed HP of potential vulnerabilities identified for some Intel® Processors and/or supporting BIOS firmware, which might allow escalation of privilege, information disclosure, or denial of service. Intel is releasing firmware updates and prescriptive guidance to mitigate these...