PT-2019-4408

Name of the Vulnerable Software and Affected Versions Intel processors affected versions not specified Description The issue is related to the implementation of Intel Transactional Synchronization Extensions TSX technology in Intel processor microcode, which lacks protection for service data. Thi...

PT-2019-4442

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper invalidation for page table updates by a virtual guest operating system, which may allow an authenticated user to potentially enable denial of servi...

CVE-2019-11184

A race condition in specific microprocessors using Intel R DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access...

NetCAT: New Attack Lets Hackers Remotely Steal Data From Intel CPUs

Unlike previous side-channel vulnerabilities disclosed in Intel CPUs, researchers have discovered a new flaw that can be exploited remotely over the network without requiring an attacker to have physical access or any malware installed on a targeted computer. DubbedNetCAT , short for Network Cach...

FreeBSD : FreeBSD -- Microarchitectural Data Sampling (MDS) (a633651b-b309-11e9-a87f-a4badb2f4699)

On some Intel processors utilizing speculative execution a local process may be able to infer stale information from microarchitectural buffers to obtain a memory disclosure. Impact : An attacker may be able to read secret data from the kernel or from a process when executing untrusted code for...

SWAPGS Attack — New Speculative Execution Flaw Affects All Modern Intel CPUs

A new variant of the Spectre Variant 1 side-channel vulnerability has been discovered that affects all modern Intel CPUs, and probably some AMD processors as well, which leverage speculative execution for high performance, Microsoft and Red Hat warned. Identified as CVE-2019-1125, the vulnerabili...

Information Disclosure Vulnerability in Multiple Intel Products (CNVD-2019-25499)

Intel Core X-series Processors are products of Intel Corporation.Intel Core X-series Processors are X-series central processing units CPUs.4th Generation Intel Core i5 Processors are 4th generation Core i5-series central processing units CPUs.4th Generation Intel Core i3 Processors are 4th...

The vulnerability of Intel processors, related to the microarchitectural data retrieval from non-cached memory (MDSUM), allows attackers to exploit this to disclose protected information.

The vulnerability of Intel processors is related to the microarchitectural data cache invalidation mechanism MDSUM. Exploiting this vulnerability can allow an attacker to disclose protected information...

Intel processors’ vulnerability related to MFBDS, which allows for the recovery of contents from fill buffers, enables attackers to disclose protected information.

The vulnerability of Intel processors is related to the recovery of contents from fill buffers MFBDS. Exploiting this vulnerability can allow an attacker to disclose protected information...

USN-3977-2 intel-microcode update

USN-3977-1 provided mitigations for Microarchitectural Data Sampling MDS vulnerabilities in Intel Microcode for a large number of Intel processor families. This update provides the corresponding updated microcode mitigations for Intel Cherry Trail and Bay Trail processor families. Original adviso...

Virtuozzo 7 : bpftool / cpupools / cpupools-features / etc (VZA-2019-039)

According to the version of the bpftool / cpupools / cpupools-features / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - The Microarchitectural Store Buffer Data MDS is a series of hardware vulnerabilities which allow speculativ...

Product update: Virtuozzo 6.0 Update 12 Hotfix 41 (6.0.12-3741)

This update provides hypervisor-related fixes for the Microarchitectural Store Buffer Data MDS vulnerability as well as a stability fix. Vulnerability id: PSBM-94407 The Microarchitectural Store Buffer Data MDS is a series of hardware vulnerabilities which allow speculative execution attacks on...

Updated virtualbox packages fix security vulnerabilities

This update provies Virtualbox 6.0.8 that fixes the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. The fixed / mitigated issues are: Modern Intel microprocessors...

Product update: Virtuozzo 7.0 Update 10 Hotfix 1 (7.0.10-320)

The Hotfix 1 for for Virtuozzo 7.0.10 mitigates the Microarchitectural Store Buffer Data MDS vulnerability and provides stability and usability bug fixes. Vulnerability id: PSBM-94407 The Microarchitectural Store Buffer Data MDS is a series of hardware vulnerabilities which allow speculative...

CVE-2019-0120

Insufficient key protection vulnerability in silicon reference firmware for IntelR PentiumR Processor J Series, IntelR PentiumR Processor N Series, IntelR CeleronR J Series, IntelR CeleronR N Series, IntelR AtomR Processor A Series, IntelR AtomR Processor E3900 Series, IntelR PentiumR Processor...

This Week in Security News: Unsecured Servers and Vulnerable Processors

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about vulnerabilities that can allow hackers to retrieve data from CPUs and mine cryptocurrency. Read on: May’s Patch Tuesday Include...

MGASA-2019-0174 Updated kernel packages fix security vulnerability

This kernel update provides the upstream 4.14.119 that adds the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. To complete the mitigatio...

Updated kernel-linus packages fixes security vulnerabilities

This kernel update provides the upstream 4.14.119 that adds the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. To complete the mitigatio...

Updated kernel-tmb packages fixes security vulnerabilities

This kernel update provides the upstream 4.14.119 that adds the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. To complete the mitigatio...

Information Disclosure Vulnerability in Multiple Intel Products (CNVD-2019-22232)

Intel Xeon Scalable Processors are products of Intel Corporation.Intel Xeon Scalable Processors is a scalable server central processing unit CPU.Intel Xeon Processor E7 v4 Family is a Xeon E7 series server central processing unit CPU.Intel Xeon Processor E5 v4 Family is a Xeon E5 series server...