[SECURITY] [DSA 4279-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4279-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2018 https://www.debian.org/security/faq -...

MGASA-2018-0347 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on the upstream 4.14.65 and adds fixes and mitigations for the now publically known security issue affecting Intel processors called L1 Terminal Fault L1TF: Systems with microprocessors utilizing speculative execution and Intel Software Guard Extensions Intel SGX...

This Week in Security News: Banks and Botnets

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, the FBI warned U.S. banks of a wide-scale cybercrime campaign called “ATM cash-out,” in which hackers use cloned ATM cards for fraudulent...

Intel Processor Diagnostic Tool Elevation of Privilege Vulnerability

Intel Processor Diagnostic Tool IPDT is a processor function diagnostic tool from Intel USA. A security vulnerability exists in Intel IPDT version 4.1.0.24, which is caused by the installation tool failing to properly set permissions on installed files. The vulnerability can be exploited to execu...

Intel Processor Diagnostic Tool elevation of privilege vulnerability (CNVD-2018-15597)

Intel Processor Diagnostic Tool IPDT is a processor function diagnostic tool from Intel USA. An elevation of privilege vulnerability exists in Intel IPDT versions prior to 4.1.0.27. A local attacker can exploit this vulnerability to execute arbitrary code...

Intel ME 6.x/7.x/8.x/9.x/10.x./11.x, SPS 4.0, and TXE 3.0 Cumulative Security Update - US

Lenovo Security Advisory: LEN-17297 Potential Impact: An attacker could load and execute arbitrary code outside the visibility of the user, operating system, and hypervisor/virtualization platform; resulting in exfiltration of secrets, subtle manipulation of system operation, or denial of service...

CVE-2018-3667

Installation tool IPDT Intel Processor Diagnostic Tool 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation...

CVE-2018-3668

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

CVE-2018-3668

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

Code injection

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

CVE-2018-3668

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

CVE-2018-3668

CVE-2018-3668 concerns Intel’s Processor Diagnostic Tool (IPDT). Connected sources confirm an elevation of privilege via an unquoted service path in IPDT before version 4.1.0.27, allowing a local attacker to potentially execute arbitrary code. Affected software: IPDT prior to 4.1.0.27 (Windows en...

CVE-2018-3667

CVE-2018-3667 affects Intel IPDT (Intel Processor Diagnostic Tool) version 4.1.0.24, where the installation tool incorrectly sets permissions on installed files. This misconfiguration can enable execution of arbitrary code and elevate privileges on the host. Public sources in the provided set des...

PT-2018-16117

Name of the Vulnerable Software and Affected Versions Intel Processor Diagnostic Tool version 4.1.0.24 Description The issue concerns the installation tool IPDT, which sets permissions of installed files incorrectly. This incorrect setting allows for the execution of arbitrary code and potential...

PT-2018-16118

Name of the Vulnerable Software and Affected Versions Intel Processor Diagnostic Tool versions prior to 4.1.0.27 Description The issue concerns unquoted service paths in the Intel Processor Diagnostic Tool, which could allow a local attacker to potentially execute arbitrary code. Recommendations...

CVE-2018-3668: Unquoted Search Path or Element

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

CVE-2018-3667: Initialization of a Resource with an Insecure Default

Installation tool IPDT Intel Processor Diagnostic Tool 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation...

Intel Processor Diagnostic Tool (IPDT) Privilege Escalation Vulnerability

Intel Processor Diagnostic Tool IPDT versions prior to 4.1.0.27 suffer from three code execution and privilege escalation vulnerabilities. Hi @ll, the executable installers of Intel's Processor Diagnostic Tool IPDT before v4.1.0.27 have three vulnerabilities^Wbeginner's errors which all allow...

powerpc and Intel i386 GNU C Library Integer Overflow Vulnerability

The powerpc is a compact instruction set architecture CPU central processing unit.The Intel i386 is an x86 series CPU central processing unit from Intel Corporation.The GNU C Library aka glibc, libc6 is one of the open source, freeware C language compilers released under the LGPL license. An...

microcode_ctl security update

CentOS Errata and Security Advisory CESA-2018:0093 The microcodectl packages provide microcode updates for Intel and AMD processors. This update supersedes microcode provided by Red Hat with the CVE-2017-5715 “Spectre” CPU branch injection vulnerability mitigation. Historically, Red Hat has...