HPESBHF04512 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.8007-05-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-41804 |...

HPESBHF04508 rev.1 - Certain HPE ProLiant DL Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DL380 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DL110 Gen10 Plus Telco server -...

HPESBHF04501 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.8007-05-2023 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.8007-05-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Ba...

CVE-2023-23908

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-41804

Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

UBUNTU-CVE-2023-23908

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure via local access...

2023.3 IPU - Intel® Xeon® Scalable Processors Advisory

Summary: A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-23908 Description: Improper access control in...

2023.3 IPU - BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37343...

PT-2023-6782 · Intel +6 · Intel Xeon Processors +6

Name of the Vulnerable Software and Affected Versions: Intel Xeon Processors affected versions not specified Description: The issue is related to unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors, which may allow a privileged user to potentially enable...

PT-2023-6783 · Intel +6 · Intel Xeon Scalable Processors +6

Name of the Vulnerable Software and Affected Versions: IntelR XeonR Scalable processors affected versions not specified Description: The issue is related to improper access control in some 3rd Generation IntelR XeonR Scalable processors, which may allow a privileged user to potentially enable...

openSUSE 15 Security Update : ucode-intel (SUSE-SU-2023:2243-2)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2243-2 advisory. - Updated to Intel CPU Microcode 20230512 release. bsc1211382. - New platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products...

Amazon Linux 2023 : microcode_ctl (ALAS2023-2023-189)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-189 advisory. 2024-05-09: CVE-2022-33196 was added to this advisory. Insufficient granularity of access control in out-of-band management in some IntelR Atom and Intel Xeon Scalable Processors may allow a...

Fedora 37 : microcode_ctl (2023-b28dc472b0)

"The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b28dc472b0 advisory. - Update to upstream 2.1-40. 20230516 - Addition of 06-6c-01/0x10 ICL-D B0 microcode at revision 0x1000230; - Addition of 06-8f-04/0x87 SPR-SP E0/S...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:2290-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2290-1 advisory. - Updated to Intel CPU Microcode 20230512 release. bsc1211382 - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Produc...

Amazon Linux AMI : microcode_ctl (ALAS-2023-1715)

The version of microcodectl installed on the remote host is prior to 2.1-47.41. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1715 advisory. 2024-02-14: CVE-2022-38090 was added to this advisory. 2024-02-01: CVE-2022-21216 was added to this advisory...

Medium: microcode_ctl

Issue Overview: Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access. CVE-2021-33117 add CVE-2022-0005 A flaw was found in hw. Improper access control for...

MGASA-2023-0085 Updated microcode packages fix security vulnerabilities

Updated microcode packages fix security vulnerabilities: Insufficient granularity of access control in out-of-band management in some IntelR Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access CVE-2022-21216...

HPESBHF04407 rev.1 - Certain HPE Edgeline Servers using Certain Intel Processor, INTEL-SA-00738, 2023.1 IPU – Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920 Server Blade - Prior to 1.6602-02-2023 HPE Edgeline e920d Server Blade - Prior to 1.6602-02-2023 HPE Edgeline e920t Server Blade - Prior to 1.6602-02-2023 CVSS...

K21344224: Lazy FP state restore vulnerability CVE-2018-3665

Security Advisory Description System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel. CVE-2018-3665 A Floating-Point FP state...

K42433061: Intel processors vulnerability CVE-2019-11139

Security Advisory Description Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access. CVE-2019-11139 Impact There is no impact; F5 products are not affected by thi...