2022.2 IPU – BIOS Advisory

Summary: A potential security vulnerability in the BIOS firmware for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33060 Description: Out-of-bounds write in the BIOS firmwa...

Single-Core CPU Cracked Post-Quantum Encryption Candidate Algorithm in Just an Hour

A late-stage candidate encryption algorithm that was meant to withstand decryption by powerful quantum computers in the future has been trivially cracked by using a computer running Intel Xeon CPU in an hour's time. The algorithm in question is SIKE — short for Supersingular Isogeny Key...

Amazon Linux AMI : microcode_ctl (ALAS-2022-1606)

The version of microcodectl installed on the remote host is prior to 2.1-47.40. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1606 advisory. 2024-05-09: CVE-2021-33117 was added to this advisory. Improper access control for some 3rd Generation IntelR XeonR...

HPESBST04300 rev.1 - Certain HPE SimpliVity Servers Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU - Intel Xeon Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 170r Gen10 Server - Prior to 2.6605172022 - Use BIOS family U38 HPE SimpliVity 190r Gen10 Server - Prior to 2.6605172022 - Use BIOS...

HPESBHF04315 rev.1 - HPE Superdome Flex Servers Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU - Intel Xeon Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to 3.55.8 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21131 |...

CVE-2022-21136

A flaw was found in hw. Improper input validation for some IntelR XeonR processors may allow a privileged user to enable a denial of service via local access. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security...

CVE-2022-21131

A flaw was found in hw. Improper access control for some IntelR XeonR processors may potentially allow an authenticated user to enable information disclosure via local access. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat...

CVE-2021-33117

A flaw was found in hw. Improper access control for some third-generation IntelR XeonR Scalable processors before BIOS version MR7 may potentially allow a local attacker to enable information disclosure via local access. Mitigation Mitigation for this issue is either not available or the currentl...

CVE-2022-21136

Improper input validation for some IntelR XeonR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-21131

Improper access control for some IntelR XeonR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

DEBIAN-CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

Improper access control

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

Improper access control

Improper access control for some IntelR XeonR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Input validation

Improper input validation for some IntelR XeonR Processors may allow a privileged user to potentially enable denial of service via local access...

UBUNTU-CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

CVE-2021-33117

CVE-2021-33117 affects some 3rd Generation Intel Xeon Scalable Processors prior to BIOS MR7. The issue is improper access control that may allow a local attacker to disclose information. Intel’s advisory recommends updating to BIOS MR7 or later and applying the corresponding microcode updates; th...

CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...

CVE-2021-33117

Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access...