Intel Fixes High-Severity Flaws in NUC, Discontinues Buggy Compute Module

Intel has stomped out high-severity flaws in its Next Unit Computing NUC mini PC firmware, and in its Modular Server MFS2600KISPP Compute Module. Overall, Intel addressed nine vulnerabilities across six products in its April security update – two of those being high-severity, and the rest being...

CVE-2020-0577: Undefined Security Weakness

Insufficient control flow for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0578: Undefined Security Weakness

Improper conditions check for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0576: Buffer Copy without Checking Size of Input

Buffer overflow in IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of service via adjacent access...

PT-2020-5634

Name of the Vulnerable Software and Affected Versions IntelR Modular Server MFS2600KISPP Compute Module affected versions not specified Description The issue is related to a buffer overflow in the IntelR Modular Server MFS2600KISPP Compute Module, which may allow an unauthenticated user to...

PT-2020-5638

Name of the Vulnerable Software and Affected Versions Intel Modular Server MFS2600KISPP Compute Module affected versions not specified Intel Modular Server MFS2600KI affected versions not specified Description The issue is related to insufficient control flow and a buffer copy without input size...

Attack matrix for Kubernetes

Kubernetes, the most popular container orchestration system and one of the fastest-growing projects in the history of open source, becomes a significant part of many companies’ compute stack. The flexibility and scalability of containers encourage many developers to move their workloads to...

Intel NUC Kits Buffer Overflow DoS

The vulnerability of the built-in software in Intel NUC Kits and Intel Compute Sticks is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow attackers to gain increased privileges...

Intel NUC Kits Compute Sticks Cards Privilege Escalation

The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

Intel NUC Kits Full Integer Overflow

The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is caused by a numerical overflow. Exploiting this vulnerability can allow attackers to gain increased privileges...

Intel NUC Kits Buffer Overflow DoS

The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

Intel NUC Kits Compute Sticks Cards Privilege Escalation

The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel NUC Kit Increased Privileges

The vulnerability in the built-in software of Intel NUC Kits and Intel Compute Sticks exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

Intel NUC Kits Buffer Overflow DoS

The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards relates to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2019-2311

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2019-14048

Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in SM8150...

CVE-2019-14081

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networki...

CVE-2019-14086

Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexpected result during the check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,...

CVE-2019-14068

Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009...

CVE-2019-10612

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure...