Privilege Escalation

intel-microcode:sid is vulnerable to privilege escalation. An incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalated privileges...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2021:1932-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1932-1 advisory. - Updated to Intel CPU Microcode 20210525 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discover...

Oracle Linux 7 : microcode_ctl (ELSA-2021-2305)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2305 advisory. 2:2.1-73.9.0.1 - for Intel, do not trigger load if on-disk microcode is not an update Orabug: 30634727 - set earlymicrocode='no' in virtualized guests ...

CVE-2021-0104

Uncontrolled search path element in the installer for the IntelR Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-0057

Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0056

Insecure inherited permissions for the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0097

Summary : CVE-2021-0097 describes a path traversal vulnerability in the BMC firmware of Intel(R) Server Board M10JNP2SB, before EFI BIOS 7215 and BMC 8100.01.08. An unauthenticated user may potentially trigger a denial of service via adjacent access. Affected product : Intel Server Board M10JNP2S...

CVE-2021-0070

CVE-2021-0070: Improper input validation in the BMC firmware of Intel Server Board M10JNP2SB (EFI BIOS prior to 7215, BMC 8100.01.08) may allow an unauthenticated user to potentially escalate privileges via adjacent access. The affected product is Intel Server Board M10JNP2SB. Impact is privilege...

CVE-2020-8670

CVE-2020-8670 is a race-condition flaw in Intel processor firmware that could allow a local privileged attack. No public exploits are known in the provided documents. Affected data indicates local access is required, with INTEL-SA advisories (INTEL-SA-00463) and related mitigations referenced by ...

CVE-2021-0001: Observable Discrepancy

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

CVE-2021-0105: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in some IntelR ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access...

CVE-2020-8704: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in a subsystem in the IntelR LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0100: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12357: Improper Initialization

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8702: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0086: Observable Discrepancy

Observable response discrepancy in floating-point operations for some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-0131: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2021-0101: Buffer Copy without Checking Size of Input

Buffer overflow in the BMC firmware for IntelR Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

CVE-2021-0134: Improper Input Validation

Improper input validation in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...