USN-7149-1 intel-microcode vulnerabilities

Avraham Shalev and Nagaraju N Kodalapura discovered that some IntelR XeonR processors did not properly restrict access to the memory controller when using IntelR SGX. This may allow a local privileged attacker to further escalate their privileges. CVE-2024-21820, CVE-2024-23918 It was discovered...

The vulnerability of Intel Xeon processors relates to a flaw in the data protection mechanism, which allows attackers to enhance their privileges.

The vulnerability of Intel Xeon processors is related to a breach in the data protection mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...

MGASA-2024-0377 Updated microcode packages fix security vulnerabilities

Improper Finite State Machines FSMs in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially enable denial of service via local access. CVE-2024-21853 Improper conditions check in some Intel® Xeon® processor memory controller...

SUSE-SU-2024:4053-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

CVE-2024-25565

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

ALPINE-CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-21853

The CVE-2024-21853 issue affects some 4th- and 5th-Generation Intel Xeon processors due to improper finite state machines in the hardware logic, letting an authorized local user potentially trigger a denial-of-service condition. Publicly documented impact is limited to local access DoS; no exploi...

CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-25565

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-25565

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

PT-2024-19095

Name of the Vulnerable Software and Affected Versions Intel Xeon Processors versions 4th and 5th Generation Description The issue is related to improper finite state machines FSMs in the hardware logic of some Intel Xeon Processors. This could potentially allow an authorized user to enable denial...

Intel Xeon Processors 安全漏洞

Intel Xeon Processors is an Intel Xeon family of central processing units CPUs from Intel Corporation USA. A security vulnerability exists in Intel Xeon Processors that stems from incorrect hardware logic. An attacker exploiting this vulnerability could cause a system denial of service...

Intel Xeon Processors 安全漏洞

Intel Xeon Processors is an Intel Xeon family of central processing units CPUs from Intel Corporation USA. A security vulnerability exists in Intel Xeon Processors that stems from insufficient control flow management. An attacker exploiting this vulnerability could cause a system denial of servic...

PT-2024-21007 · Intel · Intel Xeon Processors

Name of the Vulnerable Software and Affected Versions: IntelR XeonR Processors affected versions not specified Description: The issue is related to insufficient control flow management in UEFI firmware, which may allow an authenticated user to enable denial of service via local access...

Intel® UEFI Firmware Advisory

Summary: A potential security vulnerability in UEFI firmware for some Intel® Xeon® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25565 Description: Insufficient control flow management i...

Amazon Linux 2 : microcode_ctl (ALAS-2024-2682)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2682 advisory. 2024-12-05: CVE-2024-21853 was added to this advisory. 2024-12-05: CVE-2024-21820 was added to this advisory...

Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-748)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-748 advisory. 2024-12-05: CVE-2024-21820 was added to this advisory. 2024-12-05: CVE-2024-21853 was added to this advisory. 2024-12-05: CVE-2024-23918 was added to this advisory. Incorrect default permission...