Intel BSSA DFT Advisory

Summary: A potential security vulnerability in the customer build time configuration for the Intel BIOS Shared SW Architecture BSSA Design for Test DFT feature may allow escalation of privilege. Intel is releasing detailed guidance to address this potential vulnerability. Vulnerability Details:...

PT-2021-4028

Name of the Vulnerable Software and Affected Versions Intel Xeon Scalable Processors, Intel Xeon Processors D, Intel Xeon Processors E5 v4, Intel Xeon Processors E5 v3, Intel Xeon Processors W affected versions not specified Description The issue is related to insecure default variable...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2021:1933-1 Rating: important References: 1179833 1179836 1179837 1179839 Cross-References: CVE-2020-24489 CVE-2020-24511 CVE-2020-24512 CVE-2020-24513 CVSS scores: CVE-2020-24489 NVD : 8.8...

Qualcomm chip buffer error vulnerability

Qualcomm MDM9206 and others are products of Qualcomm Incorporated Qualcomm.MDM9206 is a central processing unit CPU product.APQ8053 is a central processing unit CPU product.SDX55 is a modem. qualcomm A buffer error vulnerability exists in multiple products that stems from a lack of length checkin...

Oracle Linux 8 : microcode_ctl (ELSA-2021-2308)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2308 advisory. 4:20210216-1.20210525.0.1 - add support for UEK6 kernels - remove no longer appropriate caveats for 06-2d-07 and 06-55-04 4:20210216-1.20210525.1 -...

ALPINE-CVE-2021-28692

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU...

SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2021:14758-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14758-1 advisory. Updated to Intel CPU Microcode 20210525 release: - CVE-2020-24513: A domain bypass transient execution vulnerability was discovere...

openSUSE 15 Security Update : ucode-intel (openSUSE-SU-2021:0876-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0876-1 advisory. - Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local...

OracleVM 3.4 : xen (OVMSA-2021-0020)

The remote OracleVM system is missing necessary patches to address security updates: - Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access. CVE-2021-0089 - Potential speculative code store bypass in a...

Amazon Linux 2 : microcode_ctl (ALAS-2021-1663)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1663 advisory. A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the...

CentOS 8 : microcode_ctl (CESA-2021:2308)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2308 advisory. - hw: vt-d related privilege escalation CVE-2020-24489 - hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 - hw:...

RHEL 7 : microcode_ctl (RHSA-2021:2300)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2300 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 8 : microcode_ctl (RHSA-2021:2306)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2306 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 8 : microcode_ctl (RHSA-2021:2308)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2308 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

Unspecified Vulnerability in QEMU

QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. A security vulnerability exists in QEMU's slirp, which stems from the fact that the bootpinput function in src/bootp.c uses memory outsi...

[ASA-202106-34] intel-ucode: multiple issues

Arch Linux Security Advisory ASA-202106-34 ========================================== Severity: High Date : 2021-06-15 CVE-ID : CVE-2020-24511 CVE-2020-24512 CVE-2020-24513 CVE-2021-24489 Package : intel-ucode Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-2051 Summa...

Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:2305)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2305-1 advisory. - hw: vt-d related privilege escalation CVE-2020-24489 - hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 - hw:...

MGASA-2021-0256 Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access CVE-2020-24489. Improper isolation ...

Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access CVE-2020-24489. Improper isolation ...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2021:1930-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1930-1 advisory. Updated to Intel CPU Microcode 20210608 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered...