CVE-2020-12289

Intel Thunderbolt controllers contain an out-of-bounds write vulnerability (CVE-2020-12289) that authenticated, local attackers could potentially exploit to cause a Denial of Service. Affected components are Thunderbolt 3/4 retimer and USB retimer controllers; the issue is detailed in Intel’s adv...

CVE-2020-12288

Intel’s advisory confirms CVE-2020-12288 affects Intel Thunderbolt controllers due to a protection mechanism failure that could allow a locally authenticated attacker to cause denial of service. Mitigation is firmware updates from system vendors; however, Intel notes no mitigations for some affec...

CVE-2020-12290

Improper access control in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12290

CVE-2020-12290 concerns improper access control in some Intel Thunderbolt controllers, potentially enabling a local denial-of-service by an authenticated user. Documentation indicates this CVE is part of Intel’s Thunderbolt vulnerability set; however, exact affected products/versions for this CVE...

CVE-2020-12292

Improper conditions check in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12292

CVE-2020-12292 affects Intel Thunderbolt controllers. The issue is an improper conditions check in certain Thunderbolt components, which could allow an authenticated local attacker to cause a denial of service. The Red Hat/NVD entries confirm the same description and indicate the attack is local ...

CVE-2020-12291

Uncontrolled resource consumption in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12296

Uncontrolled resource consumption in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12295

Improper input validation in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12293

Improper control of a resource through its lifetime in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

PT-2021-9450

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to improper input validation in some IntelR ThunderboltTM controllers, which may allow an authenticated user to potentially enable denial of...

PT-2021-9446

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to uncontrolled resource consumption in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial ...

PT-2021-9448

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to improper control of a resource through its lifetime in some IntelR ThunderboltTM controllers. This may allow an authenticated user to...

PT-2021-9444

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to an out-of-bounds write in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial of service...

PT-2021-9451

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to uncontrolled resource consumption in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial ...

PT-2021-9445

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to improper access control in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial of service...

PT-2021-9443

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description A protection mechanism failure in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12289: Out-of-bounds Write

Out-of-bounds write in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12288: Undefined Security Weakness

Protection mechanism failure in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12290: Undefined Security Weakness

Improper access control in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...