Lucene search
K

111 matches found

OSV
OSV
added 2022/05/25 3:11 p.m.5 views

SUSE-SU-2022:1847-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: Update AMD ucode and SEV firmware - CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,...

6.5CVSS6.2AI score0.00135EPSS
Exploits0References18
Schneier on Security
Schneier on Security
added 2019/10/31 11:24 a.m.38 views

A Broken Random Number Generator in AMD Microcode

Interesting story. I always recommend using a random number generator like Fortuna, even if you're using a hardware random source. It's just safer...

1.3AI score
Exploits0
Cloud Foundry
Cloud Foundry
added 2018/07/19 12:0 a.m.525 views

USN-3690-1: AMD Microcode update | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker...

5.6CVSS6.2AI score0.88597EPSS
Exploits8
Tenable Nessus
Tenable Nessus
added 2018/06/21 12:0 a.m.58 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : AMD Microcode update (USN-3690-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3690-1 advisory. Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via...

5.6CVSS7.4AI score0.88597EPSS
Exploits8References2
Tenable Nessus
Tenable Nessus
added 2018/06/13 12:0 a.m.36 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : QEMU update (USN-3679-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3679-1 advisory. Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow...

5.5CVSS7.1AI score0.46733EPSS
Exploits2References2
Ubuntu
Ubuntu
added 2018/06/12 11:21 a.m.69 views

USN-3679-1: QEMU update

Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update...

5.5CVSS7.2AI score0.46733EPSS
Exploits2
OSV
OSV
added 2018/01/09 11:47 a.m.8 views

SUSE-SU-2018:0051-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - Add microcodeamdfam17h.bin bsc1068032 CVE-2017-5715 This new firmware enables the Indirect Branch Control IBC feature on AMD family 17h processor to mitigate an attack on the branch predictor that could lead to information disclosure...

5.6CVSS6.5AI score0.88597EPSS
Exploits8References3
Oracle linux
Oracle linux
added 2018/01/04 12:0 a.m.88 views

microcode_ctl security update

1:1.17-25.2 - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04 - Add amd microcodeamdfam17h.bin data file - Resolves: 1527357 1:1.17-25.1 - Update microcode data file to 20170707 revision. - Resolves: 1465143...

4.7CVSS2AI score0.88597EPSS
Exploits8
OSV
OSV
added 2014/05/23 10:4 p.m.7 views

MGASA-2014-0237 Updated kernel-rt packages fix multiple vulnerabilities

Updated kernel-rt provides upstream 3.10.40 kernel and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of servi...

7.4CVSS6.1AI score0.49911EPSS
Exploits19References14
Mageia
Mageia
added 2014/05/23 9:59 p.m.53 views

Updated kernel-linus packages fix multiple security vulnerabilities

Updated kernel-linus provides upstream 3.10.40 kernel and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of...

7.4CVSS7.4AI score0.49911EPSS
Exploits19References13
UbuntuCve
UbuntuCve
added 2013/11/29 4:33 a.m.37 views

CVE-2013-6885

The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service system hang via a crafted application, aka the errata 793 issue...

4.7CVSS6.8AI score0.00714EPSS
Exploits0References1
Rows per page
Query Builder