K31523465: BIG-IP TMM vulnerability CVE-2022-41983

Security Advisory Description While Intel QAT QuickAssist Technology and the AES-GCM/CCM cipher is in use, undisclosed conditions cause the BIG-IP system to send data unencrypted, even with an SSL profile applied. CVE-2022-41983 Impact This vulnerability may expose confidential information to a...

K30857274: Intel QAT vulnerability CVE-2020-12333

Security Advisory Description Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-12333 Impact There is no impact; F5 products are not affected by this...

CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-1717 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Linux versions prior to 4.17 Description: The issue is related to incorrect default permissions in the software installer for some IntelR QAT drivers, which may allow an authenticated user to potentially enable escalati...

Intel(R) QAT drivers 代码问题漏洞

Intel QAT Drivers is a driver from Intel Corporation USA. A security vulnerability exists in IntelR QAT drivers for Windows versions prior to 1.6, which originates from an uncontrolled search path. An attacker can exploit the vulnerability to escalate privileges...

PT-2023-13532 · Intel · Intel Qat Drivers For Windows

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows versions prior to 1.6 Description: The issue is related to an uncontrolled search path in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially enable escalation of privilege...

Intel® QAT Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT drivers may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-36397 Description: Incorrect default permissions...

CVE-2022-41983

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT QuickAssist Technology and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even...

Race condition

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT QuickAssist Technology and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even...

CVE-2022-41983

CVE-2022-41983 describes a BIG-IP TMM vulnerability where, on certain hardware with Intel QAT and AES-GCM/CCM, data may be sent unencrypted despite an SSL profile. Affected BIG-IP branches: 16.x (vuln up to 16.1.3; fix in 16.1.3.1), 15.x (up to 15.1.6; fix in 15.1.7), 14.x (up to 14.1.5; fix in 1...

CVE-2022-41983 BIG-IP TMM Vulnerability CVE-2022-41983

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT QuickAssist Technology and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K31523465)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.1 / 15.1.7 / 16.1.3.1 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K31523465 advisory. - On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1....