7677 matches found
CVE-2020-7467
In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these...
Code injection
In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these...
CVE-2020-7467
The CVE-2020-7467 issue is a FreeBSD bhyve SVM vulnerability. Affected: FreeBSD 12.2-STABLE before r365767; 12.1-RELEASE before p10; 11.4-STABLE before r365769; 11.4-RELEASE before p4; 11.3-RELEASE before p14. Description: several AMD virtualization instructions operate on host physical addresses...
CVE-2020-7467
In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Moderate: Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: rhel-7.6.z HPEMC 7.9 REGRESSION Microcodectl microcodectl BZ1907919...
Moderate: Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: rhel-8.2.0.z HPEMC 8.3.z REGRESSION Regression in intel microcode as of 20201110...
Moderate: Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: rhel-8.1.0.z HPEMC 8.3.z REGRESSION Regression in intel microcode as of 20201110...
Moderate: Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 8. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: rhel-8.3.0.z HPEMC 8.3.z REGRESSION Regression in intel microcode as of 20201110 BZ1907898...
Moderate: Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions. The microcodectl packages provide microcode updates for Intel and A...
Moderate: Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: rhel-7.2.z HPEMC 7.9 REGRESSION Microcodectl microcodectl BZ1907916...
microcode_ctl bug fix and enhancement update
The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: rhel-8.3.0.z HPEMC 8.3.z REGRESSION Regression in intel microcode as of 20201110 BZ1907898...
missed flush in XSA-321 backport
ISSUE DESCRIPTION An oversight was made when backporting XSA-321, leading entries in the IOMMU not being properly updated under certain circumstances. IMPACT A malicious guest may be able to retain read/write DMA access to frames returned to Xen's free pool, and later reused for another purpose...
glibc bug fix and enhancement update
The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Bug Fixes and Enhancement...
ALBA-2021:0556 glibc bug fix and enhancement update
The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Bug Fixes and Enhancement...
Updated kernel packages fix security vulnerability
This kernel update is based on upstream 5.10.14 and fixes at least the following security issues: A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AFVSOCK implementation are caused by wrong locking in net/vmwvsock/afvsock.c...
AMD Fuel Service - (Fuel.service) Unquote Service Path Vulnerability
Exploit Title: AMD Fuel Service - 'Fuel.service' Unquote Service Path Discovery by: Hector Gerbacio Vendor Homepage: https://www.amd.com/ Tested Version: 1.0.0.0 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 8.1 con Bing Step to discover Unquoted Service Path: C:\wmic service ge...
AMD Fuel Service - 'Fuel.service' Unquote Service Path
Exploit Title: AMD Fuel Service - 'Fuel.service' Unquote Service Path Discovery by: Hector Gerbacio Discovery Date: 2021-02-05 Vendor Homepage: https://www.amd.com/ Tested Version: 1.0.0.0 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 8.1 con Bing Step to discover Unquoted...
AMD Fuel Service Unquoted Service Path
Exploit Title: AMD Fuel Service - 'Fuel.service' Unquote Service Path Discovery by: Hector Gerbacio Discovery Date: 2021-02-05 Vendor Homepage: https://www.amd.com/ Tested Version: 1.0.0.0 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 8.1 con Bing Step to discover Unquoted Servi...
About the security content of macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...