SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1949-1)

This update for the Linux Kernel 4.4.121-9273 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1943-1)

This update for the Linux Kernel 4.4.114-9267 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1945-1)

This update for the Linux Kernel 4.4.114-9264 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

Oracle Linux 6 : kernel (ELSA-2018-2164)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2164 advisory. - x86 entry/64: Don't use IST entry for BP stack Waiman Long 1596113 CVE-2018-10872 - mm mempolicy: fix use after free when calling getmempolicy August...

July Patch Tuesday – Critical browser patches, Lazy FP, Exchange, Adobe vulns

This month's Patch Tuesday is medium in weight, with 54 CVEs containing 17 Criticals. All but two of the Critical vulnerabilities are in Microsoft's browsers or browser-related technologies. An additional speculative execution vulnerability announced in June was patched as well. Adobe has also...

CVE-2018-13088

The CVE-2018-13088 entry concerns a vulnerability in the mintToken function of a Futures Pease (FP) Ethereum token contract. The connected documents confirm a concrete flaw: an integer overflow in mintToken that allows the contract owner to set the balance of an arbitrary user to any value. This ...

CVE-2018-13088: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for Futures Pease FP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Command injection

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...

CVE-2018-3665

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...

CVE-2018-3665

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...

CVE-2018-3665

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...

CVE-2018-3665

CVE-2018-3665 affects systems using Intel Core-based CPUs with Lazy FP state restore enabled. A local attacker could exploit speculative execution side channels to read FP/SIMD state from other processes or the kernel. Public details in connected docs show Linux kernel mitigations (disable Lazy F...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4134)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4134 advisory. - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28156176 CVE-2018-3665 - KVM: Fix stack-out-of-bounds read in writemmio Wanpeng Li Orabug:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4144)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4144 advisory. 4.1.12-124.16.4 - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28135099 CVE-2018-3665 Tenable has extracted the preceding description block directl...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Service Tester (CVE-2014-3566, CVE-2014-6457, CVE-2014-6593, CVE-2015-0410)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Version 5, 6 and 7 that is used by Rational Service Tester. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability CVE-2014-3566. These were disclosed as part of the IBM Java SDK updat...

New 'Lazy FP State Restore' Vulnerability Found in All Modern Intel CPUs

Hell Yeah! Another security vulnerability has been discovered in Intel chips that affects the processor's speculative execution technology—like Specter and Meltdown—and could potentially be exploited to access sensitive information, including encryption related data. Dubbed Lazy FP State Restore,...

CVE-2018-3665

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...

Microsoft Guidance for Lazy FP State Restore

Executive summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On June 13...

Intel Releases Security Advisory on Lazy FP State Restore Vulnerability

Intel has released recommendations to address a vulnerability—dubbed Lazy FP state restore—affecting Intel Core-based microprocessors. An attacker could exploit this vulnerability to obtain access to sensitive information. NCCIC encourages users and administrators to review Intel's Security...

Lazy FP State Restore

Summary: System software may utilize the Lazy FP state restore technique to delay the restoring of state until an instruction operating on that state is actually executed by the new process. Systems using Intel® Core-based microprocessors may potentially allow a local process to infer data...