The vulnerabilities of Intel and ARM processors, related to the use of speculative read operations on system registers, allow attackers to exploit these vulnerabilities to disclose protected information.

The vulnerabilities of Intel and ARM processors are related to the use of speculative read operations for system registers. Exploiting these vulnerabilities can allow attackers to disclose system parameters through a specially crafted application...

Buffer overflow

Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...

UBUNTU-CVE-2018-12201

Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...

UBUNTU-CVE-2018-12205

Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Coretm Processor, 7th Generation IntelR Coretm Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access...

CVE-2018-12201

Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor, IntelR PentiumR Silver J5005 Processor, IntelR PentiumR Silver N5000 Processor, IntelR CeleronR J4105 Processor, IntelR CeleronR J4005...

Spectre, Google, and the Universal Read Gadget

Spectre, a seemingly never ending menace to processors, is back in the limelight once again thanks to the Universal Read Gadget. First seen at the start of 2018, Spectre emerged alongside Meltdown as a major potential threat to people’s system security. Meltdown and Spectre Meltdown targeted Inte...

The vulnerabilities of Intel, ARM, and AMD processors stem from the unique workings of the branch prediction module, which allows attackers to exploit the protected information.

The vulnerabilities of Intel, ARM, and AMD processors are related to the characteristics of the branch prediction module’s operation. Exploiting these vulnerabilities allows attackers to disclose confidential information by creating conditions for incorrect branch predictions...

The vulnerability of the Lazy FPU context switching function in Intel processors allows a hacker to gain access to protected information.

The vulnerability of the Lazy FPU context switching function in Intel processors is related to insufficient protection of data in the FPU registers of the processor. Exploiting this vulnerability can allow an attacker to access protected information...

Researchers Implant "Protected" Malware On Intel SGX Enclaves

Cybersecurity researchers have discovered a way to hide malicious code in Intel SGX enclaves, a hardware-based memory encryption feature in modern processors that isolates sensitive code and data to protect it from disclosure or modification. In other words, the technique allows attackers to...

UBUNTU-CVE-2018-19967

An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service host OS hang because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix...

7 New Meltdown and Spectre-type CPU Flaws Affect Intel, AMD, ARM CPUs

Disclosed earlier this year, potentially dangerous Meltdown and Spectre vulnerabilities that affected a large family of modern processors proven that speculative execution attacks can be exploited in a trivial way to access highly sensitive information. Since then, several more variants of...

Which Threats had the Most Impact During the First Half of 2018?

One of the best ways for organizations to shore up their data security efforts and work toward more proactive protection is by examining trends within the threat environment. Taking a look at the strategies for attack, infiltration and infection currently being utilized by hackers can point towar...

New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

A team of security researchers has discovered another serious side-channel vulnerability in Intel CPUs that could allow an attacker to sniff out sensitive protected data, like passwords and cryptographic keys, from other processes running in the same CPU core with simultaneous multi-threading...

[SECURITY] [DLA 1506-1] intel-microcode security update

Package : intel-microcode Version : 3.20180807a.1deb8u1 CVE ID : CVE-2018-3615, CVE-2018-3620, CVE-2018-3646 CVE-2018-3639, CVE-2018-3640, CVE-2017-5715 Security researchers identified speculative execution side-channel methods which have the potential to improperly gather sensitive data from...

Speculative Execution Side Channel Vulnerability Variants - Lenovo Support US

No description provided...

Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.65 and adds fixes and mitigations for the now publically known security issue affecting Intel processors called L1 Terminal Fault L1TF: Systems with microprocessors utilizing speculative execution and Intel Software Guard Extensions Intel SGX may...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on the upstream 4.14.65 and adds fixes and mitigations for the now publically known security issue affecting Intel processors called L1 Terminal Fault L1TF: Systems with microprocessors utilizing speculative execution and Intel Software Guard Extensions Intel SGX...

MGASA-2018-0345 Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.65 and adds fixes and mitigations for the now publically known security issue affecting Intel processors called L1 Terminal Fault L1TF: Systems with microprocessors utilizing speculative execution and Intel Software Guard Extensions Intel SGX may...

MGASA-2018-0346 Updated kernel-tmb packages fix security vulnerabilities

This kernel-tmb update is based on the upstream 4.14.65 and adds fixes and mitigations for the now publically known security issue affecting Intel processors called L1 Terminal Fault L1TF: Systems with microprocessors utilizing speculative execution and Intel Software Guard Extensions Intel SGX m...

L1 Terminal Fault Side Channel Vulnerabilities - US

Lenovo Security Advisory: LEN-24163 Potential Impact: Malicious code running locally may be able to observe contents of privileged memory, circumventing expected privilege levels Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3615, CVE-2018-3620, CVE-2018-3646 Summary...