PT-2021-4028

Name of the Vulnerable Software and Affected Versions Intel Xeon Scalable Processors, Intel Xeon Processors D, Intel Xeon Processors E5 v4, Intel Xeon Processors E5 v3, Intel Xeon Processors W affected versions not specified Description The issue is related to insecure default variable...

SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2019:14217-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14217-1 advisory. - TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable...

Intel BIOS Platform Sample Code Advisory

Summary: Potential security vulnerabilities in Intel BIOS platform sample code for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS platform sample code updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8764 Description:...

Updated microcode packages fix security vulnerabilities

This update provides the Intel 20191112 microcode release that adds the microcode side fixes and mitigations for at least the following security issues: A flaw was found in the implementation of SGX around the access control of protected memory. A local attacker of a system with SGX enabled and a...

CVE-2019-11139

Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11139

Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11139

Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11139

CVE-2019-11139 concerns an improper conditions check in the voltage modulation interface of some Intel Xeon Scalable processors. The underlying issue could allow a privileged local attacker to cause a denial of service. Public documentation in the connected sources confirms the affected class of ...

CVE-2019-11136

CVE-2019-11136 affects Intel firmware for Xeon® Scalable Processors (2nd Gen Xeon Scalable and Xeon D Family). Root cause: insufficient access control in system firmware, enabling a locally authenticated attacker to escalate privileges, potentially cause denial of service or information disclosur...

CVE-2019-11137: Improper Input Validation

Insufficient input validation in system firmware for IntelR XeonR Scalable Processors, IntelR XeonR Processors D Family, IntelR XeonR Processors E5 v4 Family, IntelR XeonR Processors E7 v4 Family and IntelR AtomR processor C Series may allow a privileged user to potentially enable escalation of...

CVE-2019-11136: Undefined Security Weakness

Insufficient access control in system firmware for IntelR XeonR Scalable Processors, 2nd Generation IntelR XeonR Scalable Processors and IntelR XeonR Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via...

VMSA-2019-0020 : Hypervisor-Specific Mitigations for Denial-of-Service and Speculative-Execution Vulnerabilities

a. Hypervisor-Specific Mitigations for Machine Check Error on Page Size Change MCEPSC Denial-of-Service vulnerability - CVE-2018-12207 VMware ESXi, Workstation, and Fusion patches include Hypervisor-Specific Mitigations for Machine Check Error on Page Size Change MCEPSC. A malicious actor with...

CVE-2019-11139: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11139

Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access. Mitigation As of this time there are no known mitigations. Please install relevant updated packages to...

PT-2019-4281

Name of the Vulnerable Software and Affected Versions Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors and Intel Xeon Processors D Family affected versions not specified Description The issue is related to insufficient access control in system firmware, which may allo...

PT-2019-4280

Name of the Vulnerable Software and Affected Versions IntelR XeonR Scalable Processors affected versions not specified IntelR XeonR Processors D Family affected versions not specified IntelR XeonR Processors E5 v4 Family affected versions not specified IntelR XeonR Processors E7 v4 Family affecte...

PT-2019-4435

Name of the Vulnerable Software and Affected Versions Intel Xeon Scalable Processors affected versions not specified Description The issue is related to insufficient checking of unusual or exceptional states in the microcode of Intel Xeon processors. It may allow an attacker to cause a denial of...

2019.2 IPU – Intel® Xeon® Scalable Processors Voltage Setting Modulation Advisory

Summary: A potential security vulnerability in some Intel® Xeon® Scalable Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11139 Description: Improper conditions check in the voltage...

Multiple Intel Processors Side Channel CVE-2019-11135 Information Disclosure Vulnerability

Description Multiple Intel Processors are prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer 7.1 LTSR CU2...

Intel Xeon Scalable Processors CVE-2019-11139 Denial of Service Vulnerability

Description Intel Xeon Scalable Processors are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Intel Xeon Scalable Processors Redhat Enterprise Linux 5 Redhat Enterprise Linux 6 Redhat Enterprise Linux 7...