CVE-2020-8713

CVE-2020-8713 affects Intel® Server Boards, Server Systems and Compute Modules prior to firmware version 1.59, where improper authentication may let an unauthenticated user potentially escalate privileges via adjacent access. NVD reports a CVSS v3.1 base score of 8.8 (High) with ADJACENT attack v...

CVE-2020-8723

Cross-site scripting for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8722

CVE-2020-8722 affects Intel Server Boards, Server Systems and Compute Modules, where a Buffer overflow in a subsystem before version 1.59 may allow a privileged user to escalate privileges via local access. Multiple connected sources (NVD entry, Red Hat advisory, and Intel’s Intel-SA-00384 adviso...

CVE-2020-8718

CVE-2020-8718: Buffer overflow in a subsystem of Intel® Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to escalate privileges via local access. Affected components are the Intel server hardware family; exploitation is local with low attack co...

CVE-2020-8721

CVE-2020-8721 describes improper input validation in Intel Server Boards, Server Systems and Compute Modules prior to firmware version 1.59, which may allow a privileged user to escalate privileges via local access. The issue affects Intel’s firmware for several server product families; the docum...

CVE-2020-8707

CVE-2020-8707 affects Intel Server Boards, Server Systems and Compute Modules. The issue is a buffer overflow in the daemon before version 1.59, which may allow an unauthenticated user to escalate privileges via adjacent access. Impact: potential privilege escalation. Affected products include In...

CVE-2020-8731

CVE-2020-8731 affects Intel® Server Boards, Server Systems and Compute Modules prior to firmware version 1.59. The issue is described as incorrect execution-assigned permissions in the file system, which may allow an authenticated user to escalate privileges via local access. Intel’s advisory (In...

CVE-2020-8730

CVE-2020-8730 affects Intel® Server Boards, Server Systems and Compute Modules. The issue is a heap-based overflow in firmware prior to version 1.59, which may allow an authenticated user to potentially escalate privileges via local access. Intel’s advisory confirms affected families (R1000WT/R20...

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

Intel is warning of a rare critical-severity vulnerability affecting several of its motherboards, server systems and compute modules. The flaw could allow an unauthenticated, remote attacker to achieve escalated privileges. The recently patched flaw CVE-2020-8708 ranks 9.6 out of 10 on the CVSS...

SUSE-SU-2020:2200-1 Security update for google-compute-engine

This update for google-compute-engine fixes the following issues: - Do not add the created user to the adm CVE-2020-8903, docker CVE-2020-8907, or lxd CVE-2020-8933 groups if they exist bsc1173258. - Don't enable and start google-network-daemon.service when it's already installed bsc1169978...

Intel® Server Boards, Server Systems and Compute Modules Advisory

Summary: Potential security vulnerabilities in some Intel® Server Boards, Server Systems and Compute Modules may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8708...

Huawei FusionCompute Information Disclosure Vulnerability (CNVD-2020-46462)

Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An information disclosure vulnerability exists in Huawei FusionCompute version 8.0.0, which originates from the program failing t...

Huawei FusionCompute Information Disclosure Vulnerability (CNVD-2020-46464)

Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An information disclosure vulnerability exists in Huawei FusionCompute version 8.0.0, which originates from the program failing t...

CVE-2019-14130

Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130...

CVE-2019-14124

Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130...

Memory corruption

Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130...

Design/Logic Flaw

When kernel thread unregistered listener, Use after free issue happened as the listener clients private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

Buffer overflow

Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C...

CVE-2020-3671

Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, Nicobar, QCM2150, QCS405, Saipan, SDM845, SM8150, SM8250, SXR2130...

CVE-2020-3698

CVE-2020-3698 describes an out-of-bounds write during QoS DSCP mapping caused by improper input validation of data from an association response frame in Qualcomm-powered Snapdragon platforms (widely listed devices such as APQ8009/SDM66x families and others). The underlying issue affects data hand...