Lucene search
+L

2226 matches found

The Hacker News
The Hacker News
added 2025/02/04 8:58 a.m.22 views

AMD SEV-SNP Vulnerability Allows Malicious Microcode Injection with Admin Access

A security vulnerability has been disclosed in AMD's Secure Encrypted Virtualization SEV that could permit an attacker to load a malicious CPU microcode under specific conditions. The flaw, tracked as CVE-2024-56161 , carries a CVSS score of 7.2 out of 10.0, indicating high severity. "Improper...

7.2CVSS6.9AI score0.00523EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/04 7:51 a.m.22 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP. Mitigation Mitigation requires to...

7.2CVSS7AI score0.00523EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/03 6:15 p.m.21 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS0.00523EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/03 6:15 p.m.2 views

DEBIAN-CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS7.7AI score0.00523EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/03 6:15 p.m.14 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

6.9AI score
SaveExploits0References5
OSV
OSV
added 2025/02/03 6:15 p.m.7 views

UBUNTU-CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS7.3AI score0.00523EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2025/02/03 5:24 p.m.18 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS7.7AI score0.00523EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/02/03 5:24 p.m.37 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/03 5:24 p.m.13 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS6.9AI score0.00523EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/02/03 9:11 a.m.3 views

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20241112 release bsc1233313 CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enabl...

8.8CVSS7.6AI score0.00256EPSS
SaveExploits0References12
OSV
OSV
added 2025/02/03 9:11 a.m.5 views

SUSE-SU-2025:20092-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References7
SUSE Linux
SUSE Linux
added 2025/02/03 8:57 a.m.5 views

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240910 release bsc1230400 CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access...

6.8CVSS7AI score0.00209EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/03 8:57 a.m.4 views

SUSE-SU-2025:20058-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240910 release bsc1230400 - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local...

6.8CVSS5.8AI score0.00209EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2025/02/03 8:49 a.m.3 views

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240514 release bsc1224277 CVE-2023-45733: Security updates for INTEL-SA-01051 CVE-2023-46103: Security updates for INTEL-SA-01052 CVE-2023-45745,CVE-2023-47855: Security updates for INTEL-SA-01036...

7.9CVSS7.7AI score0.0075EPSS
SaveExploits0References22
OSV
OSV
added 2025/02/03 8:49 a.m.15 views

SUSE-SU-2025:20020-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240514 release bsc1224277 - CVE-2023-45733: Security updates for INTEL-SA-01051 - CVE-2023-46103: Security updates for INTEL-SA-01052 - CVE-2023-45745,CVE-2023-47855: Security updates for...

8.2CVSS6.8AI score0.0075EPSS
SaveExploits0References12
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.57 views

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to remote code execution due to the use of OpenSSH (CVE-2024-6387)

Summary IBM Virtualization Engine TS7700 is susceptible to remote code execution due to the use of OpenSSH CVE-2024-6387. OpenSSH is used by TS7700 to allow access from the TSSC Console by IBM authorized service personnel. Vulnerability Details CVEID:CVE-2024-6387 DESCRIPTION: OpenSSH could allow...

8.1CVSS8.7AI score0.99506EPSS
SaveExploits71Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.8 views

The vulnerability of graphics drivers in microprogramming software for Intel processors arises from incorrect neutralization of special elements in the output data used by the input component. This allows attackers to exploit their privileges.

The vulnerability of graphic drivers in microprogramming software for Intel processors is related to incorrect neutralization of special elements in the output data used by the input component. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

7.8CVSS5.4AI score0.00342EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2025/01/10 9:58 a.m.8 views

CLSA-2025-1736503077 Fix of 5 CVEs

New microcode update packages from upstream up to 2024-11-12: - Updated microcodes: sig 0x000806f4, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig...

8.8CVSS6.3AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/10 9:55 a.m.8 views

CLSA-2025-1736502911 Fix of 5 CVEs

New microcode update packages from upstream up to 2024-11-12: - Updated microcodes: sig 0x000806f4, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig...

8.8CVSS6.3AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.14 views

PT-2026-7454

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity...

5.3CVSS5.5AI score0.00297EPSS
SaveExploits0References4
Rows per page
Query Builder