Ubuntu: Security Advisory (USN-6316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6321-1)

The remote Ubuntu 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6321-1 advisory. Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A...

USN-6316-1 linux-oem-6.1 vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...

USN-6315-1: Linux kernel vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...

Ubuntu 22.04 LTS / 23.04 : Linux kernel vulnerabilities (USN-6318-1)

The remote Ubuntu 22.04 LTS / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6318-1 advisory. Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various...

Fedora 37 : xen (2023-04473fc41e)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-04473fc41e advisory. update to xen-4.16.5 which includes x86/AMD: Speculative Return Stack Overflow XSA-434, CVE-2023-20569 x86/Intel: Gather Data Sampling XSA-435,...

OESA-2023-1548 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable...

OESA-2023-1550 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable...

SUSE: Security Advisory (SUSE-SU-2023:3382-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2023:3383-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3383-1 advisory. - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potentia...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / dtb-al / dtb-zte / etc (SUSE-SU-2023:3391-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3391-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security...

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2023:3395-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3395-1 advisory. - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. bsc1214082, XSA-434 -...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:3382-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3382-1 advisory. - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potential security vulnerability in some...

SUSE-SU-2023:3382-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potential security vulnerability in some Intel� Processors which may allow information disclosure. - CVE-2023-23908: Fixed a potential security...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2023:3359-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3359-1 advisory. - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potential security vulnerability in some...

Intel BIOS Firmware Information Disclosure (INTEL-SA-00813) (CVE-2022-27879)

Improper buffer restrictions in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local accessCVE-2022-27879 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versio...

Intel BIOS Firmware DoS (INTEL-SA-00813) (CVE-2022-43505)

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access. CVE-2022-43505 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Intel BIOS Firmware Privilege Escalation (INTEL-SA-00813) (CVE-2022-37343)

Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2022-37343 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Intel BIOS Firmware Privilege Escalation (INTEL-SA-00813) (CVE-2022-44611)

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access. CVE-2022-44611 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Fedora 37 : microcode_ctl (2023-10d34be85a)

"The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-10d34be85a advisory. - Update to upstream release 20230808 - Update of 06-55-03/0x97 SKX-SP B1 microcode from revision 0x1000171 up to 0x1000181; - Update of...