CVE-2022-38161

The CVE-2022-38161 entry concerns the Gumstix Overo SBC on the VSKS board (used in Orlan-10 and others) with risk through 2022-08-09. Concrete detail: an unrestricted remapping of the NOR flash memory that contains the FPGA bitstream is possible, enabling potential integrity/availability risks to...

PT-2022-24248 · Gumstix · Gumstix Overo Sbc

Name of the Vulnerable Software and Affected Versions: Gumstix Overo SBC on the VSKS board through 2022-08-09 Description: The issue allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA, as used on the Orlan-10 and other platforms. Recommendations: For Gumst...

Subreption Gumstix Overo SBC 缓冲区错误漏洞

The Subreption Gumstix Overo SBC is a touch substrate from Subreption USA. A security vulnerability exists in Subreption Gumstix Overo SBC version 2022-08-09 and prior versions, which stems from a vulnerability that allows unrestricted remapping of NOR flash memory containing an FPGA bitstream...

Intel® FPGA OPAE Driver Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00440.html...

CVE-2020-24485

Improper conditions check in the IntelR FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24485

Improper conditions check in the IntelR FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24485

Improper conditions check in the IntelR FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24485

CVE-2020-24485 concerns the Intel FPGA OPAE driver for Linux, with root cause described as an improper conditions check in the driver prior to kernel 4.17. The vulnerability can enable privilege escalation by an authenticated, local user. Intel’s advisory INTEL-SA-00440 lists affected drivers and...

CVE-2020-24485

Improper conditions check in the IntelR FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software allows a hacker to disclose protected information or gain increased privileges.

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information or enhance their...

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software allows a hacker to gain increased privileges.

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2020-12312

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-12312

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Buffer overflow

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-12312

Summary: CVE-2020-12312 (and related CVE-2020-8737) affect Intel Stratix 10 FPGA firmware shipped with Intel Quartus Prime Pro, before version 20.2. What is vulnerable: Intel Stratix 10 FPGA firmware/internal buffers in the Quartus Prime Pro software; improper buffer restrictions allow an unauthe...

CVE-2020-12312

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-8737

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...

CVE-2020-8737

The CVE-2020-8737 issue affects Intel Stratix 10 FPGA firmware shipped with Intel Quartus Prime Pro before version 20.1. The root cause is improper buffer restrictions, allowing an unauthenticated attacker with physical access to potentially escalate privileges and/or cause information disclosure...

Intel® Stratix® 10 FPGA SDM for Intel® Quartus® Prime Pro Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00388.html...

Intel Adds Memory Encryption, Firmware Security to Ice Lake Chips

Intel’s third-generation Xeon Scalable server processors, code-named Ice Lake, will be rolled out with new security upgrades that the chip giant claims will better protect devices from firmware attacks. The upcoming chips are based on Ice Lake, Intel’s 10nm CPU microarchitecture, which was first...