Amazon Linux 2 : microcode_ctl (ALAS-2022-1762)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1762 advisory. 2024-05-09: CVE-2021-33117 was added to this advisory. A flaw was found in microcode. Under complex microarchitectural...

PT-2022-9728 · Amd +4 · Amd Cpus +4

Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to speculative execution in AMD CPUs, which may allow data leakage by transiently executing beyond unconditional direct branches. This could potentially lead to the...

PT-2022-1954 · Intel +8 · Intel Processors +8

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to errors in parameter processing in the implementation of the Intra-mode BTI IMBTI mode of Intel processor microcode. It may allow an authorized user to...

PT-2022-2087 · Intel +9 · Intel Processors +12

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Intel Core i7-1185G7 Intel Core i9-12900K Haswell series Description: The issue is related to non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors,...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2022:0576-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0576-1 advisory. - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of...

openSUSE 15 Security Update : ucode-intel (openSUSE-SU-2022:0574-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0574-1 advisory. - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2022:0575-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0575-1 advisory. Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2022:0574-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0574-1 advisory. Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in...

SUSE: Security Advisory (SUSE-SU-2022:0576-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:0574-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

intel-microcode is vulnerable to denial of service DoS attacks. Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access...

OPENSUSE-SU-2022:0574-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege bsc1192615 - CVE-2021-0127: Intel Processor Breakpoint Control Flow...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2022:0541-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0541-1 advisory. - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2022:0502-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0502-1 advisory. - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of...

GSD-2022-1000261 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06

powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

GSD-2022-1000198 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06

powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.96 by commit...

MGASA-2022-0064 Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access CVE-2021-0127 / SA-00532...

Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access CVE-2021-0127 / SA-00532...

CVE-2021-22787

A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 Versions prior to V3.40, Modicon M340 X80 Ethernet...

CVE-2021-22785

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 Versions prior to V3.40, Modicon M340 X...