Mageia: Security Advisory (MGASA-2024-0103)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated microcode packages fix security vulnerabilities

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-22655 Information exposure through microarchitectural state after transient...

MGASA-2024-0103 Updated microcode packages fix security vulnerabilities

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-22655 Information exposure through microarchitectural state after transient...

VMware ESXi 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2022-0016)

The version of VMware ESXi installed on the remote host is prior to 6.7 P07, or 7.x prior to 7.0 Update 3e. It is, therefore, affected by multiple vulnerabilities as referenced in the VMSA-2022-0016 advisory: - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow a...

OESA-2024-1295 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access.CVE-2023-38575 Protection...

CVE-2023-39368

A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host...

CVE-2023-38575

A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host...

HPESBST04611 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to v2.0003-06-2024 HPE StoreEasy 1860 Storage - Prior to v2.0003-06-2024 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- |...

CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

ALPINE-CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

ALPINE-CVE-2023-38575

Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

DEBIAN-CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-38575

Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

DEBIAN-CVE-2023-38575

Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2023-32282

Race condition in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-32282

Race condition in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-32282

Race condition in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-39368

CVE-2023-39368 describes a protection mechanism failure in the bus lock regulator on certain Intel processors that may allow an unauthenticated attacker to cause a Denial of Service via network access. Public advisories reference mitigations via microcode updates (e.g., Intel microcode packages a...

CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...