243 matches found
PT-2022-9085
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to incorrect default permissions in the firmware for some IntelR Processors. This may allow a privileged user to potentially enable a denial of service via loca...
CVE-2021-0116: Out-of-bounds Write
Out-of-bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...
PT-2022-9096
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper initialization in the firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via physic...
AlmaLinux 8 : microcode_ctl (ALSA-2021:2308)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:2308 advisory. - Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0158
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0157
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0158: Improper Input Validation
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0157: Undefined Security Weakness
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0146: Undefined Security Weakness
Hardware allows activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
PT-2021-7223
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to the removal or modification of security-critical code in some IntelR Processors, potentially allowing an authenticated user to enable information disclosure...
PT-2021-4853
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper input validation in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via...
PT-2021-12915
Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an unchecked return value in the firmware for some IntelR Processors and insecure default variable initialization for the Intel BSSA DFT feature. This may...
CVE-2021-0114: Initialization of a Resource with an Insecure Default
Unchecked return value in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...
Oracle Linux 8 : microcode_ctl (ELSA-2021-2308)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2308 advisory. 4:20210216-1.20210525.0.1 - add support for UEK6 kernels - remove no longer appropriate caveats for 06-2d-07 and 06-55-04 4:20210216-1.20210525.1 -...
SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2021:1932-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1932-1 advisory. - Updated to Intel CPU Microcode 20210525 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discover...
Oracle Linux 7 : microcode_ctl (ELSA-2021-2305)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2305 advisory. 2:2.1-73.9.0.1 - for Intel, do not trigger load if on-disk microcode is not an update Orabug: 30634727 - set earlymicrocode='no' in virtualized guests ...
CVE-2021-0089
Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2020-24512
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...