5843 matches found
HPESBHF04342 rev.1 - Certain HPE ProLiant DL/ML Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6007-14-2022 HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 1.6207-14-2022 HPE ProLiant DL360 Gen10 Plus server - Pri...
FreeBSD : wolfssl -- multiple issues (9b9a5f6e-1755-11ed-adef-589cfc01894a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9b9a5f6e-1755-11ed-adef-589cfc01894a advisory. - AMD EPYC Processors contain an information disclosure vulnerability in the Secure Encrypted...
Updated kernel-linus packages fix security vulnerabilities
This kernel-linus update is based on upstream 5.15.58 and fixes at least the following security issues: Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled CVE-2022-21505. Aliases in the branch predictor may cause some AMD processors to predict the...
SUSE SLES12 Security Update : xen (SUSE-SU-2022:2574-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2574-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information...
Oracle Linux 6 : microcode_ctl (ELSA-2022-9670)
The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9670 advisory. 3:1.17-33.31.0.3 - update 06-55-04 to 0x2006d05 - update 06-55-07 to 0x5003302 - update 06-6a-04 to 0xb000280 - update 06-6a-06 to 0xd000375...
SUSE SLES15 Security Update : xen (SUSE-SU-2022:2600-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2600-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable...
SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2022:2597-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2597-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user t...
USN-5535-1 Intel Microcode vulnerabilities
Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could use this to obtain sensitive information. CVE-2021-0145 Mark Ermolov, Dmitry Sklyarov and Maxim Goryachy discovered that some Intel processors did not prevent test and debug...
SUSE SLES12 Security Update : xen (SUSE-SU-2022:2560-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2560-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable...
SUSE SLES12 Security Update : xen (SUSE-SU-2022:2557-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2557-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable...
SUSE SLES12 Security Update : xen (SUSE-SU-2022:2569-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2569-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information...
BSA-2022-2013
Security Advisory ID : BSA-2022-2013 Component : RETBLEED Revision : 1.0: Final A research team in Switzerland has found a new variant of the speculative execution vulnerabilities that affect some Intel and AMD chips aka RETBLEED. Retbleed CVE-2022-29900 and CVE-2022-29901 is the new addition to...
Intel BIOS Privilege Escalation
The vulnerability of the BIOS microprogramming system of Intel processors is related to writing beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
OESA-2022-1773 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2020-24489 Domain-bypass transient execution vulnerability in so...
Intel BIOS Privilege Escalation
The vulnerability of the BIOS microprogramming system of Intel processors is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
Intel BIOS Privilege Escalation
The vulnerability of the BIOS microprogramming system of Intel processors is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
Intel BIOS Privilege Escalation
The vulnerability of the BIOS microprogramming system of Intel processors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
Intel BIOS Privilege Escalation
The vulnerability of the BIOS microprogramming system of Intel processors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
F5 Networks BIG-IP : Intel processors MMIO stale data vulnerability (K08152433)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K08152433 advisory. Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated...
USN-5529-1: Linux kernel (OEM) vulnerabilities
It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly handle some error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1679...