SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:2941-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2941-1 advisory. - Intel CPU Microcode was updated to the 20240813 release bsc1229129 - CVE-2024-24853: Security updates for INTEL- SA-01083 -...

kernel: Local information disclosure on Intel(R) Atom(R) processors

A vulnerability was found in some Intel Atom Processor's microcode. This issue may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted system...

November 17, 2022—KB5021654 (OS Build 14393.5502) Out-of-band

November 17, 2022—KB5021654 OS Build 14393.5502 Out-of-band Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Note 10/11/22 IMPORTANT On January 10, 2023, the public extension for servicing devices that have the Intel Atom Clover Trail processor will end. The...

drm/amd/display: Atom Integrated System Info v2_2 for DCN35

...

PT-2024-40074

Name of the Vulnerable Software and Affected Versions: Zend Framework versions prior to 1.11.13 and 1.12.0 Description: The issue concerns the insecure usage of PHP's DOM extension in Zend Feed Rss and Zend Feed Atom, allowing for potential XML eXternal Entity XXE vectors. This could be exploited...

CVE-2024-36897

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx-dcbios-integratedinfo while it was NULL. DAL parse...

Bento4 Heap Buffer Overflow DoS

The vulnerability of the AP4StszAtom::GetSampleSize function in the ISO-MP4 file reading and writing library in Bento4 is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-36897 drm/amd/display: Atom Integrated System Info v2_2 for DCN35

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx-dcbios-integratedinfo while it was NULL. DAL parse...

CVE-2024-36897: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx-dcbios-integratedinfo while it was NULL. DAL parse...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a vulnerability in the drm/amd/display module Atom Integrated System Info v22 for DCN35...

USN-6797-1: Intel Microcode vulnerabilities

It was discovered that some 3rd and 4th Generation Intel® Xeon® Processors did not properly restrict access to certain hardware features when using Intel® SGX or Intel® TDX. This may allow a privileged local user to potentially further escalate their privileges on the system. This issue only...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Intel Microcode vulnerabilities (USN-6797-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6797-1 advisory. It was discovered that some 3rd and 4th Generation Intel Xeon Processors did not properly restric...

RHEL 5 : hw (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 - hw: Fast forward store predictor CVE-2020-869...

CVE-2023-43527

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527 Buffer Over-read in Video

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527 Buffer Over-read in Video

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527: Buffer Over-read

Information disclosure while parsing dts header atom in Video...

Debian dla-3808 : intel-microcode - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3808 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3808-1 [email protected]...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2024-1559)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the...

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2024:1102-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1102-1 advisory. - CVE-2023-28746: Register File Data Sampling bsc1221332 - CVE-2024-2193: Fixed GhostRace, a...