PT-2021-11037

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper input validation in the firmware for some IntelR Processors. This may allow an authenticated user to potentially enable denial of service via loca...

PT-2021-12901

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper initialization in the firmware, which may allow a privileged user to potentially enable a denial of service via local access. Recommendations: At...

PT-2021-12809

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper input validation in the firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via...

CVE-2020-24486: Improper Input Validation

Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

Fixed vulnerabilities in various Intel processors, chipsets, firmware, drivers and tools

Intel has fixed a sizable number of vulnerabilities in a range of processors, chipsets, firmware, drivers and tools. Many of the named chipsets are integrated and mostly present in systems built with Intel hardware. The associated tooling is generally included and installed by default. A maliciou...

RHEL 7 : microcode_ctl (RHSA-2021:2303)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2303 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 8 : microcode_ctl (RHSA-2021:2307)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2307 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 7 : microcode_ctl (RHSA-2021:2301)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2301 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 7 : microcode_ctl (RHSA-2021:2302)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2302 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 7 : microcode_ctl (RHSA-2021:2305)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2305 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

PT-2021-9455

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to an out of bounds read in the firmware for some IntelR Processors. This may allow an authenticated user to potentially enable escalation of privilege via loca...

CVE-2020-24511: Exposure of Resource to Wrong Sphere

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

PT-2021-12898

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified IntelR Brand Verification Tool versions prior to 11.0.0.1225 Description: The issue concerns an observable response discrepancy in floating-point operations for some IntelR Processors, which m...

PT-2021-9454

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to insufficient control flow management in the firmware for some IntelR Processors. This may allow an unauthenticated user to potentially enable escalation of...

HPESBST04168 rev.1 - HPE StoreEasy Gen9 Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1X30 Storage Prior to version 2.90 HPE StoreEasy 1X40 Storage Prior to version 2.90 HPE StoreEasy 1X50 Storage...

HPESBST04167 rev.1 - HPE StoreEasy Gen10 Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Storage File Controller Prior to version 2.50 HPE StoreEasy 1X60 Storage Prior to version 2.50 HPE StoreEasy 1450 Storage...

PT-2021-9453

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to an out of bounds write in the firmware for some IntelR Processors. This may allow a privileged user to potentially enable denial of service via local access...

PT-2021-5796

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Xen affected versions not specified Description The issue is related to an observable response discrepancy that may allow an authorized user to potentially enable information disclosure via loc...

CVE-2021-0095: Improper Initialization

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...

PT-2021-12808

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: A race condition in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: At the...