SUSE CVE-2022-28693

Unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

SUSE CVE-2022-29901

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under...

2023.1 IPU - BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT Authenticated Code Modules ACM for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS updates to mitigate these potential...

2023.1 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors with Intel® Software Guard Extensions SGX may allow information disclosure. Intel is releasing firmware updates to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38090 Description: Improper isolati...

HPESBHF04425 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-00700, 2023.1 IPU – Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage -Prior to 1.7202-02-2023 U46 ROM Family HPE StoreEasy 1860 Storage -Prior to 1.7202-02-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04414 rev.4 - Certain HPE ProLiant BL/DL/ML Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Local Escalation of Privileges

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - prior to 2.7602-09-2023 HPE ProLiant DL20 Gen10 Server - prior to 2.6801-12-2023 HPE ProLiant DL160 Gen10 Server - prior to...

HPESBHF04439 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04413 rev.1 - Certain HPE ProLiant Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server -Prior to 1.7202-02-2023 HPE ProLiant DL360 Gen10 Plus server -Prior to 1.7202-02-2023 HPE ProLiant DL380 Gen10 Plus server -Prior t...

PT-2023-9408 · Intel +4 · Intel Processors +4

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions, which may allow a privileged user to...

HPESBHF04440 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Local Escalation of Privilege Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL450 Gen10 Server - Prior to 2.7602-09-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-20...

HPESBHF04433 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21216 |...

Siemens SIMATIC Industrial Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5865-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5865-1 advisory. It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2 V4L2 implementation in the Linux kernel. A local attacker...

USN-5862-1: Linux kernel (Qualcomm Snapdragon) vulnerabilities

It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2 V4L2 implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20369 Pawan Kumar Gupta, Alyssa Milburn, Ami...

Ubuntu 18.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-5862-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5862-1 advisory. It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2 V4L2 implementation in the Linux kernel. A local attacker...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-5854-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5854-1 advisory. It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2 V4L2 implementation in the Linux kernel. A local attacker...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.5.2)

The version of AOS installed on the remote host is prior to 6.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.5.2 advisory. - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection ...

hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions

A flaw was found in hw. In certain processors with Intel's Enhanced Indirect Branch Restricted Speculation eIBRS capabilities, soon after VM exit or IBPB command event, the linear address following the most recent near CALL instruction prior to a VM exit may be used as the Return Stack Buffer RSB...

AZL-12989 CVE-2022-4543 affecting package kernel 5.15.200.1-1

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2023-1223)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to...