8232 matches found
CVE-2020-3548
A vulnerability in the Transport Layer Security TLS protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The...
K000148584: Intel Xeon Processor vulnerability CVE-2024-23918
Security Advisory Description Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-23918 Impact There is no impact; F5 products are not...
Intel® Xeon® Processor with Intel® SGX Advisory
Summary: Potential security vulnerabilities in some Intel® Xeon® processors using Intel® Software Guard Extensions Intel SGX may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-23918 Description...
Modbus MITM
The vulnerability of the Modbus protocol implementation in Schneider Electric’s programmable logic controllers PLCs such as Modicon M340 CPU BMXP34, Modicon MC80 BMKC80, and Modicon Momentum Unity M1E Processor 171CBU lies in the execution of operations outside the buffer in memory. Exploiting th...
UBUNTU-CVE-2024-23918
Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-21820
Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-9413
The transportmessagehandler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor AP to cause a buffer overflow in System Control Processor SCP firmware...
PT-2024-28106
Name of the Vulnerable Software and Affected Versions IntelR XeonR processor family E-Core affected versions not specified Description A protection mechanism failure in the SPP for some IntelR XeonR processor family E-Core may allow an authenticated user to potentially enable escalation of...
Siemens SIMATIC CP 1543-1 Authorization Error Vulnerability
SIMATIC CP 1543-1 communication processors connect SIMATIC S7-1500 controllers to Ethernet networks. They provide integrated security features such as firewalls, virtual private networks VPNs, and support other protocols with data encryption. An authorization error vulnerability exists in the...
Intel® Xeon® Processor Advisory
Summary: A potential security vulnerability in some 4th and 5th Generation Intel® Xeon® Processors may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21853 Description: Improper Finite State Machines...
PT-2024-19074
Name of the Vulnerable Software and Affected Versions Intel Xeon processor memory controller affected versions not specified Description The issue concerns incorrect default permissions in certain Intel Xeon processor memory controller configurations when using Intel SGX. This may allow a...
Linux DRM/AMDGPU DoS
The vulnerability of DRM/AMDGPU cores in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to cause service failures...
CVE-2024-23918: DEPRECATED: Improper Sanitization of Custom Special Characters
Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-9413: Improper Handling of Exceptional Conditions
The transportmessagehandler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor AP to cause a buffer overflow in System Control Processor SCP firmware...
CVE-2024-21820: Incorrect Default Permissions
Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-38660: Protection Mechanism Failure
Protection mechanism failure in the SPP for some IntelR XeonR processor family E-Core may allow an authenticated user to potentially enable escalation of privilege via local access...
kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)
A vulnerability was found in the Intel Xeon Processor's microcode. This issue may allow a malicious actor to achieve local privilege escalation when using Intel SGX or Intel TDX features...
kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses
A vulnerability was found in the ACPI subsystem's CPPC driver in the Linux kernel. This issue occurs due to the mishandling of memory access bit width during performance capability calculations, which can lead to misaligned memory accesses and cause kernel panics on affected platforms...
kernel: Integer Overflow in raid5_cache_count
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...
kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask
A vulnerability was found in the Linux kernel that involves improper handling of per-CPU data in systems where cpupossiblemask has gaps between CPUs. This can lead to an index which accesses non-existent or unset CPU areas and potentially causes kernel crashes...