Lucene search
K

396 matches found

OSV
OSV
added 2020/06/11 1:16 p.m.6 views

SUSE-SU-2020:1609-1 Security update for xen

This update for xen to version 4.12.3 fixes the following issues: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling...

5.5CVSS6.7AI score0.00481EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2020/06/11 12:0 a.m.40 views

CentOS: Security Advisory for kernel (CESA-2020:2430)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS7.2AI score0.00481EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/06/11 12:0 a.m.260 views

openSUSE: Security Advisory for ucode-intel (openSUSE-SU-2020:0791-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS7AI score0.00481EPSS
Exploits0References2
OSV
OSV
added 2020/06/10 5:58 p.m.7 views

OPENSUSE-SU-2020:0791-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated Intel CPU Microcode to 20200602 prerelease bsc1172466 This update contains security mitigations for: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores...

5.5CVSS6.5AI score0.00481EPSS
Exploits0References7
Cent OS
Cent OS
added 2020/06/10 5:19 p.m.125 views

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2020:2430 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

5.5CVSS6.9AI score0.00481EPSS
Exploits0References7
OSV
OSV
added 2020/06/10 10:31 a.m.3 views

SUSE-SU-2020:1601-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated Intel CPU Microcode to 20200602 prerelease bsc1172466 This update contains security mitigations for: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores...

5.5CVSS6.8AI score0.00481EPSS
Exploits0References7
OSV
OSV
added 2020/06/10 8:31 a.m.7 views

SUSE-SU-2020:1597-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called...

7.8CVSS7.1AI score0.00713EPSS
Exploits1References19
OSV
OSV
added 2020/06/10 8:6 a.m.2 views

SUSE-SU-2020:14394-1 Security update for microcode_ctl

This update for microcodectl fixes the following issues: Updated Intel CPU Microcode to 20200602 prerelease bsc1172466 This update contains security mitigations for: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores...

5.5CVSS6.8AI score0.00481EPSS
Exploits0References7
OPENSUSE Linux
OPENSUSE Linux
added 2020/06/10 12:0 a.m.81 views

Security update for ucode-intel (moderate)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2020:0791-1 Rating: moderate References: 1154824 1156353 1172466 Cross-References: CVE-2020-0543 CVE-2020-0548 CVE-2020-0549 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is n...

5.5CVSS7AI score0.00481EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2020/06/09 9:3 p.m.124 views

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

5.5CVSS6.9AI score0.00481EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/06/09 6:15 p.m.5 views

hw: Special Register Buffer Data Sampling (SRBDS)

A new domain bypass transient execution attack known as Special Register Buffer Data Sampling SRBDS has been found. This flaw allows data values from special internal registers to be leaked by an attacker able to execute code on any core of the CPU. An unprivileged, local attacker can use this fl...

5.5CVSS7AI score0.00481EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2020/06/09 6:15 p.m.80 views

Moderate: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update

Updated microcodectl packages that fix several security bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

5.5CVSS7AI score0.00481EPSS
Exploits0References6
FreeBSD
FreeBSD
added 2020/06/09 12:0 a.m.59 views

Intel CPU issues

Intel reports: Intel CPUs suffer Special Register Buffer Data Sampling vulnerability...

5.5CVSS2.6AI score0.00481EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2020/05/06 12:2 p.m.44 views

Security Bulletin: IBM Cloud Pak System is vulnerable to Intel Microarchitectural Data Sampling (MDS) Vulnerabilites

Summary Potential security vulnerabilities in CPUs may allow information disclosure. Vulnerability Details CVEID: CVE-2019-11091 DESCRIPTION: Microarchitectural Data Sampling Uncacheable Memory MDSUM: Uncacheable memory on some microprocessors utilizing speculative execution may allow an...

5.6CVSS0.8AI score0.01697EPSS
Exploits0Affected Software1
Xen Project
Xen Project
added 2020/03/10 5:2 p.m.64 views

Load Value Injection (LVI) speculative side channel

ISSUE DESCRIPTION This is very closely related to the Microarchitectural Data Sampling vulnerabilities from May 2019. Please see https://xenbits.xen.org/xsa/advisory-297.html for details about MDS. A new way of using the micro-architectural details behind MDS has been identified. Instead of simpl...

5.6CVSS2.3AI score0.03017EPSS
Exploits1
Lenovo
Lenovo
added 2020/03/07 12:32 a.m.21 views

Intel SGX and Processor Side Channel Data Leakage Vulnerabilities - Lenovo Support US

No description provided...

7.8CVSS5.7AI score0.03017EPSS
Exploits1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.37 views

Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2019-2210)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.8AI score0.01697EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/30 2:48 p.m.38 views

Security Bulletin: IBM Netezza Firmware Diagnostics Support Tool is affected by the vulnerabilities known as Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities

Summary CVE-2018-12126 - Microarchitectural Store Buffer Data Sampling MSBDS CVSS Base Score: 6.5 Medium CVE-2018-12127 - Microarchitectural Load Port Data Sampling MLPDS CVSS Base Score: 6.5 Medium CVE-2018-12130 - Microarchitectural Fill Buffer Data Sampling MFBDS CVSS Base Score: 6.5 Medium...

5.6CVSS2.1AI score0.01697EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/19 12:0 a.m.63 views

RancherOS < 1.5.2 Intel Microarchitectural Data Sampling Local Information Disclosure

The remote host is running a version of RancherOS prior to v1.5.2, hences is exposed to an Information Disclosure Vulnerability. Microarchitectural Data Sampling MDS is a family of side channel attacks on internal buffers in Intel CPUs. CVE-2018-12126, CVE-2018-12130, CVE-2018-12127, CVE-2019-110...

5.9CVSS6.6AI score0.01697EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2019/12/02 12:0 a.m.235 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0222)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Microarchitectural Store Buffer Data Sampling MSBDS: Store buffers on some microprocessors utilizing speculative execution may allow an...

9.8CVSS7.7AI score0.04145EPSS
Exploits4References13
Rows per page
Query Builder