2656 matches found
Kernel: KVM: DoS via write flood to I/O port 0x80
Linux kernel Virtualization Module CONFIGKVM for the Intel processor family CONFIGKVMINTEL is vulnerable to a DoS issue. It could occur if a guest was to flood the I/O port 0x80 with write requests. A guest user could use this flaw to crash the host kernel resulting in DoS...
hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)
Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA STore Address and STD STore Data sub-operations. These sub-operations allow the processor to hand-off address generation...
hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)
Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA STore Address and STD STore Data sub-operations. These sub-operations allow the processor to hand-off address generation...
hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)
Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA STore Address and STD STore Data sub-operations. These sub-operations allow the processor to hand-off address generation...
Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities - Lenovo Support US
No description provided...
Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities - US
Lenovo Security Advisory: LEN-26696 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12126 - Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12127 - Microarchitectural Load Port Data Sampling MLPDS CVE-2018-12130 -...
FreeBSD -- Microarchitectural Data Sampling (MDS)
Problem Description: On some Intel processors utilizing speculative execution a local process may be able to infer stale information from microarchitectural buffers to obtain a memory disclosure. Impact: An attacker may be able to read secret data from the kernel or from a process when executing...
HPESBHF03933 rev.7 - HPE Products using certain Intel Processors, Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL380 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL160 Gen10 Server Firmware...
Denial Of Service (DoS)
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...
Denial Of Service (DoS)
kernel-rt is vulnerable to denial of service. A flaw was found in the Linux kernel's Performance Events implementation. On systems with certain Intel processors, a local, unprivileged user could use this flaw to cause a denial of service by leveraging the perf subsystem to write into the reserved...
Denial Of Service (DoS)
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...
The vulnerabilities of Intel and ARM processors, related to the use of speculative read operations on system registers, allow attackers to exploit these vulnerabilities to disclose protected information.
The vulnerabilities of Intel and ARM processors are related to the use of speculative read operations for system registers. Exploiting these vulnerabilities can allow attackers to disclose system parameters through a specially crafted application...
Buffer overflow
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...
UBUNTU-CVE-2018-12201
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...
UBUNTU-CVE-2018-12205
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Coretm Processor, 7th Generation IntelR Coretm Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access...
CVE-2018-12201
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...
Spectre, Google, and the Universal Read Gadget
Spectre, a seemingly never ending menace to processors, is back in the limelight once again thanks to the Universal Read Gadget. First seen at the start of 2018, Spectre emerged alongside Meltdown as a major potential threat to people’s system security. Meltdown and Spectre Meltdown targeted Inte...
The vulnerabilities of Intel, ARM, and AMD processors stem from the unique workings of the branch prediction module, which allows attackers to exploit the protected information.
The vulnerabilities of Intel, ARM, and AMD processors are related to the characteristics of the branch prediction module’s operation. Exploiting these vulnerabilities allows attackers to disclose confidential information by creating conditions for incorrect branch predictions...
The vulnerability of the Lazy FPU context switching function in Intel processors allows a hacker to gain access to protected information.
The vulnerability of the Lazy FPU context switching function in Intel processors is related to insufficient protection of data in the FPU registers of the processor. Exploiting this vulnerability can allow an attacker to access protected information...
Researchers Implant "Protected" Malware On Intel SGX Enclaves
Cybersecurity researchers have discovered a way to hide malicious code in Intel SGX enclaves, a hardware-based memory encryption feature in modern processors that isolates sensitive code and data to protect it from disclosure or modification. In other words, the technique allows attackers to...