5920 matches found
Speculative Execution Side Channel Vulnerability Variants - Lenovo Support US
No description provided...
Speculative Execution Side Channel Variants 4 and 3a - US
Lenovo Security Advisory: LEN-22133 Potential Impact: Malicious code running locally may be able to observe contents of privileged memory or registers, circumventing expected privilege levels Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3639, CVE-2018-3640 Summary...
CVE-2018-8435
A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...
CVE-2018-8435
A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...
Security feature bypass
A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...
CVE-2018-8435
CVE-2018-8435 is a Windows Hyper-V Security Feature Bypass vulnerability where the Hyper-V BIOS loader may fail to provide a high-entropy source. The issue can allow a remote attacker to bypass security restrictions by rebooting a guest VM, impacting Windows Server 2016 and Windows 10/Windows 10 ...
CVE-2018-8435
A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...
Microsoft Windows Hyper-V Security Bypass Vulnerability
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation USA.Windows Hyper-V is one of the virtualization products that supports the creation of virtual machines in Windows. A security feature bypass vulnerability exists in Microsoft Windows Hyper-V that...
Microsoft Windows Multiple Vulnerabilities (KB4457132)
This host is missing a critical security update according to Microsoft KB4457132 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows Hyper-V Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source. To exploit this vulnerability, an attacker would need to reboot a guest virtual machine numerous times until the vulnerability is triggered. The security update addresses the...
Intel® NUC Firmware Security Advisory
Summary: A potential security vulnerability in firmware for Intel® NUC may allow information disclosure, escalation of privilege and/or denial of service. Intel® is releasing firmware security updates for Intel® NUC Firmware to mitigate this potential vulnerability. Vulnerability Details CVEID:...
RHEL 7 : qemu-kvm-rhev (RHSA-2016:0725)
An update for qemu-kvm-rhev is now available for Red Hat Enterprise Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Intel Software Guard Extensions (SGX) Vulnerabilities - US
Lenovo Security Advisory: LEN-21284 Potential Impact: Elevation of privilege, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5736, CVE-2018-3626, CVE-2018-3639, CVE-2018-3640, CVE-2018-3691 Summary Description: Intel has issued several advisories...
HPESBHF03871 rev.1 - Certain HPE Altoline Switches using Microprocessors with Speculative Execution, Local Unauthenticated Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)
Potential Security Impact: Local: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Altoline 6920 48XG 6QSFP+ x86 ONIE AC Back-to-Front Switch BIOS versions prior to Build 20180212, e.g. A02 - Refer to the BIOS version and Build Date in...
CVE-2018-6622
An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group TCG Trusted Platform Module TPM 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can...
Authentication flaw
An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group TCG Trusted Platform Module TPM 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can...
CVE-2018-6622
An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group TCG Trusted Platform Module TPM 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can...
CVE-2018-6622
CVE-2018-6622 describes a TPM 2.0 BIOS firmware issue where an abnormal S3 resume can cause TPM 2.0 to clear PCRs, potentially allowing a local attacker to overwrite PCRs and bypass seal/unseal and remote attestation. HP and Lenovo advisories reference this vulnerability as a local security issue...
L1 Terminal Fault Side Channel Vulnerabilities - US
Lenovo Security Advisory: LEN-24163 Potential Impact: Malicious code running locally may be able to observe contents of privileged memory, circumventing expected privilege levels Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3615, CVE-2018-3620, CVE-2018-3646 Summary...