CVE-2023-28547

Memory corruption in SPS Application while requesting for public key in sorter TA...

CVE-2023-33023 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Memory corruption while processing finishsign command to pass a rsp buffer...

CVE-2023-28547 Buffer Copy Without Checking Size of Input in SPS Applications

Memory corruption in SPS Application while requesting for public key in sorter TA...

CVE-2023-28547

CVE-2023-28547 is a memory corruption issue in the SPS Application when requesting a public key in the sorter Trust Agent (TA), affecting Qualcomm components (including closed-source parts). Root cause described as memory corruption in SPS Application; exposed impact on confidentiality, integrity...

CVE-2023-28547 Buffer Copy Without Checking Size of Input in SPS Applications

Memory corruption in SPS Application while requesting for public key in sorter TA...

PT-2024-12171 · Unknown · Sps Application

Name of the Vulnerable Software and Affected Versions: SPS Application affected versions not specified Description: The issue concerns memory corruption in the SPS Application when requesting a public key in the sorter TA. Recommendations: At the moment, there is no information about a newer...

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-35191

The CVE-2023-35191 entry concerns Intel SPS firmware where a resource-management error can allow a privileged user to cause a denial of service over the network. Affected components are Intel SPS firmware (versions subject to the advisory). The underlying issue is uncontrolled resource consumptio...

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

HPESBHF04605 rev.1 - HPE ProLiant DL/DX Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00923, 2024.1 IPU - Intel Chipset Software and SPS Advisory, Remote Denial of Service Vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v04.04.04.603.0 HPE ProLiant DL360 Gen10 Plus server - Prior to v04.04.04.603.0 HPE ProLiant DL380 Gen10 Plus server - Pri...

CVE-2024-23591

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

CVE-2024-23591

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

CVE-2024-23591

The CVE-2024-23591 entry concerns Lenovo ThinkSystem SR670V2 servers (manufactured roughly June 2021–July 2023) left in Manufacturing Mode. Affected scenario: an attacker with privileged logical access to the host or physical access to server internals could modify or disable Intel Boot Guard fir...

CVE-2023-29153

Uncontrolled resource consumption for some IntelR SPS firmware before version SPSE506.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access...

Design/Logic Flaw

Uncontrolled resource consumption for some IntelR SPS firmware before version SPSE506.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-29153

Intel SPS firmware CVE-2023-29153 affects Intel Server Platform Services prior to SPS_E5_06.01.04.002.0. The issue is uncontrolled resource consumption that may allow a privileged user to cause a denial of service over the network. CVSS 3.1 vector: AV:N/AC:L/PR:H/UI:N/S:U/I:N/A:H (base score 4.9,...

CVE-2023-29153

Uncontrolled resource consumption for some IntelR SPS firmware before version SPSE506.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-29153

Uncontrolled resource consumption for some IntelR SPS firmware before version SPSE506.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access...

Intel® SPS Firmware Advisory

Summary: A potential security vulnerability in some Intel® Server Platform Services SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-29153 Description: Uncontrolled resource consumption f...