Post Breach, Peatix Data Reportedly Found on Instagram, Telegram

Event-discovery application Peatix has disclosed a data breach, after ads for stolen user-account information were reportedly being circulated on Instagram and Telegram. In a data breach notice to affected users, Peatix said it learned on Nov. 9 that user account data had been improperly accessed...

hw: Vector Register Leakage-Active

A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...

hw: Information disclosure issue in Intel SGX via RAPL interface

A vulnerability was found in Intel's implementation of RAPL Running Average Power Limit. An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem...

CVE-2020-4788

A flaw was found in the Linux kernel. IBM Power9 processors can speculatively operate on data stored in the L1 cache before it has been completely validated. The attack has limited access to memory and is only able to access memory normally permissible to the execution context. The highest threat...

CVE-2020-4788

IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296...

Design/Logic Flaw

IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296...

CVE-2020-4788

IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296...

CVE-2020-4788

IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296...

IBM has released AIX iFixes in response to a vulnerability in IBM POWER9,IBM has released VIOS iFixes in response to a vulnerability in IBM POWER9

IBM SECURITY ADVISORY First Issued: Thu Nov 19 17:01:56 CST 2020 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/power9advisory.asc https://aix.software.ibm.com/aix/efixes/security/power9advisory.asc...

PT-2020-6171 · Ibm +9 · Aix +12

Name of the Vulnerable Software and Affected Versions: IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors IBM Power9 processors Description: The issue is related to speculation on incompletely validated data, which could allow a local user to obtain sensitive information from the data in the L1 cac...

Oracle Linux 7 : microcode_ctl (ELSA-2020-5083)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5083 advisory. - Update Intel CPU microcode to microcode-20201027 release, addresses CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698 1893261, 1893249,...

Oracle Linux 6 : microcode_ctl (ELSA-2020-5084)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5084 advisory. - Update Intel CPU microcode to microcode-20201027 release, addresses CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698 1893243, 1893238: -...

Oracle Linux 8 : microcode_ctl (ELSA-2020-5085)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5085 advisory. - Update Intel CPU microcode to microcode-20201027 release, addresses CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698 1893265, 1893253,...

Information Disclosure

Linux kernel is vulnerable to Information Disclosure. The vulnerability exists due to insufficient access control in the Linux kernel driver for some IntelR Processors. This flaw may allow an authenticated user to potentially enable information disclosure through local access...

Vulnerability fixed in Intel processors

A vulnerability has been fixed in some Intel processors. The vulnerability allows a local malicious person to obtain elevated privileges. Intel has released firmware updates to fix the vulnerability. fix. More information can be found on the page below:...

MGASA-2020-0422 Updated microcode package fixes security vulnerabilities

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-8694 Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to...

Updated microcode package fixes security vulnerabilities

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-8694 Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to...

CVE-2020-0599

Improper access control in the PMC for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the PMC for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-0599

CVE-2020-0599 describes an improper access control vulnerability in the Intel Power Management Controller (PMC) that could allow a privileged user to escalate privileges via local access. The CVSS1 (3.1) base score is 6.7 (Medium) with LOCAL access, LOW attack complexity, and HIGH impact on confi...