HPESBHF04753 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01071 - 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 380 Gen10 G - Prior to H...

CVE-2024-11149

In OpenBSD 7.4 before errata 014, vmm4 did not restore GDTR limits properly on Intel VMX CPUs...

OpenBSD 安全漏洞

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD organization. A security vulnerability exists in versions of OpenBSD prior to 7.4 that stems from vmm not properly recovering the GDTR limit on Intel CPUs...

The vulnerability of the caching mechanism for microprogramming software on Intel processors allows attackers to enhance their privileges.

The vulnerability of the caching mechanism for microprogramming software on Intel processors is related to improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel Alias Checking Trusted Module (Intel ACTM), a microprogramming software component for Intel’s 4th and 5th generation processors, allows attackers to exploit it to increase their privileges.

The vulnerability of the Intel Alias Checking Trusted Module Intel ACTM, a microprogramming software component of Intel’s 4th and 5th generation processors, is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to increase their...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20241112 release bsc1233313 CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enabl...

CVE-2024-36242

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36242

Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36242

CVE-2024-36242 is an Intel Processor (SPP) vulnerability described in multiple sources as a protection mechanism failure that could allow an authenticated local user to escalate privileges. The CVE affects Intel processors through the Sub-Page write Permissions (SPP) mechanism, with CVSS v3.1 bas...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24985

Exposure of resource to wrong sphere in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24985

CVE-2024-24985 affects Intel processors with Intel ACTM, enabling potential local privilege escalation by exposing a resource to the wrong sphere. Descriptions in multiple sources (Intel ACTM advisory, Red Hat, HP BIOS updates) confirm the issue and recommend applying firmware/BIOS mitigations pr...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-26925 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: A protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendation...

Intel Processors 安全漏洞

Intel Processors IPPs are American Intel Corporation's provide for interpreting computer instructions and processing data in computer software. A security vulnerability exists in Intel Processors SPP. An attacker can exploit the vulnerability to elevate privileges...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's provide interpretation of computer instructions and processing of data in computer software. A security vulnerability exists in Intel Processors. An attacker can exploit the vulnerability to elevate privileges...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's provide interpretation of computer instructions and processing of data in computer software. A security vulnerability exists in Intel Processors. An attacker can exploit the vulnerability to elevate privileges...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's provide for interpreting computer instructions and processing data in computer software. A security vulnerability exists in Intel Processors that stems from a check time use time contention condition. An attacker could exploit the vulnerability to...