CVE-2021-0146

Hardware allows activation of test and debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Intel Processors BIOS firmware 输入验证错误漏洞

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. An input validation error vulnerability exists in the Intel Processors BIOS firmware, which can be exploited by an attacker with local access to elevate the...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. A security vulnerability exists in Intel Processors that stems from inadequate control flow management in the BIOS firmware...

kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c

A flaw was found in the Linux kernel. On some Haswell CPUs, userspace applications such as perf-fuzzer can cause a system crash because the PEBS status in a PEBS record is mishandled...

BIOS Reference Code Advisory

Summary: Potential security vulnerabilities in the BIOS reference code for some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0157 Description: Insufficient control flow...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's provide for interpreting computer instructions and processing data in computer software. A security vulnerability exists in Intel processors that allows an unauthenticated user to physically access scalable privileges...

HPESBHF04205 rev.1 - HPE Edgeline EL300 Converged Edge Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline EL300 Converged Edge System Prior to BIOS: EL011.40 09/25/2021; prior to ME: v11.8.86.3909 CVSS Scores: | CVE | CVSS Vector | Base Scor...

NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0165)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has microcodectl packages installed that are affected by multiple vulnerabilities: - Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosu...

NewStart CGSL MAIN 6.02 : microcode_ctl Vulnerability (NS-SA-2021-0134)

The remote NewStart CGSL host, running version MAIN 6.02, has microcodectl packages installed that are affected by a vulnerability: - Improper removal of sensitive information before storage or transfer in some IntelR Processors may allow an authenticated user to potentially enable information...

PT-2021-7214 · Intel · Intel Processors With Sgx

Name of the Vulnerable Software and Affected Versions: Intel Processors with SGX affected versions not specified Description: The issue is related to the implementation of the JTAG interface in Intel microprogram software, which is associated with insufficient boundaries of the controlled system...

Intel Processors Information Disclosure Vulnerability (CNVD-2022-05687)

Intel Processors Intel processors is a U.S. Intel Corporation that provides interpretation of computer instructions and processing of data in computer software. Intel Processors has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

OESA-2021-1350 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2020-24511 Observable timing discrepancy in some...

PT-2021-5033 · Intel +5 · Intel Processors +5

Name of the Vulnerable Software and Affected Versions: IntelR processors affected versions not specified Description: The issue is related to the activation of test or debug logic at runtime for some IntelR processors, which may allow an unauthenticated user to potentially enable escalation of...

openSUSE 15 Security Update : xen (openSUSE-SU-2021:1236-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1236-1 advisory. - Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via...

SUSE SLES12: xen / xen-doc-html / xen-libs / xen-libs-32bit / xen-tools / etc (SUSE-SU-2021:2957-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2957-1 advisory. - CVE-2021-3594: slirp: invalid pointer initialization may lead to information disclosure udpbsc1187378. - CVE-2021-3595: slirp:...

SUSE SLES15 Security Update : xen (SUSE-SU-2021:2943-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2943-1 advisory. - CVE-2021-28698: long running loops in grant table handling XSA-380bsc1189378. - CVE-2021-28692: xen: inappropriate x86 IOMMU...

SUSE SLED12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2021:2924-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2924-1 advisory. Security issues fixed: - CVE-2021-28693: xen/arm: Boot modules are not scrubbed bsc1186428 - CVE-2021-28692: xen:...

hw: observable timing discrepancy in some Intel Processors

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

hw: Vector Register Data Sampling

A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...