OPENSUSE-SU-2020:0954-1 Security update for nasm

This update for nasm fixes the following issues: nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...

SUSE-SU-2020:1864-1 Security update for nasm

nasm was updated to version 2.14.02: Fix crash due to multiple errors or warnings during the code generation pass if a list file is specified. Create all system-defined macros defore processing command-line given preprocessing directives -p, -d, -u, --pragma, --before. If debugging is enabled,...

SUSE-SU-2020:1843-1 Security update for nasm

This update for nasm fixes the following issues: nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...

Intel SGX and Processor Side Channel Data Leakage Vulnerabilities - Lenovo Support US

No description provided...

PT-2019-4271

Name of the Vulnerable Software and Affected Versions Intel Software Guard Extensions SDK versions 2.4.100.51291 and earlier Intel Software Guard Extensions SDK Linux versions 2.6.100.51363 and earlier Description The issue is related to insufficient input validation, which may allow an attacker ...

Intel SGX Driver Input Validation Error Vulnerability

Intel SGX driver is a SGX Intel Software Security Extensions driver from Intel USA. An input validation error vulnerability exists in the Intel SGX driver. An attacker could exploit this vulnerability to cause a denial of service...

A week in security (February 11 – 17)

Last week on Malwarebytes Labs we discussed the return of the Sextortion Bitcoin scams, we gave you an early overview of the exploit kits in the winter of 2019, we talked about the destruction of VFEmail service, for consumers we discussed whether you should remove yourself from social media, for...

Foreshadow- L1 Terminal Fault: SGX

Systems with microprocessors utilizing speculative execution and Intel® software guard extensions Intel® SGX may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis. CVE: CVE-2018-3615 Last...

CVE-2018-3615

Systems with microprocessors utilizing speculative execution and Intel software guard extensions Intel SGX may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis...

CVE-2018-3689

The CVE affects the AESM daemon in the Intel SGX Platform Software Component for Linux prior to version 2.1.102. A local attacker can disable AESM, causing a denial of service to remote attestation. The NVD CVSSv3.1 vector indicates LOCAL access, low attack complexity, privileges required: LOW, w...

PT-2018-16126

Name of the Vulnerable Software and Affected Versions Intel Software Guard Extensions Platform Software Component for Linux versions prior to 2.1.102 Description The issue allows a local attacker to disable the AESM daemon, resulting in a denial of service for features like remote attestation...

CVE-2018-3689: Undefined Security Weakness

AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM...

Privilege escalation

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

CVE-2017-5736

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

CVE-2017-5736: Improper Privilege Management

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

PT-2018-8264

Name of the Vulnerable Software and Affected Versions: Intel Software Guard Extensions Platform Software Component versions prior to 1.9.105.42329 Description: The issue allows a local attacker to execute arbitrary code as administrator due to an elevation of privilege in the software component...

Intel® SGX SDK Edger8r and Intel® Software Guard Extensions Platform Software Component

Summary: CVE-2018-3626: The Edger8r tool in the Intel® Software Guard Extensions SGX Software Development Kit SDK before version 2.1.2 Linux and 1.9.6 Windows may generate code that is susceptible to a side channel attack, potentially allowing a local user to access unauthorized information...