243 matches found
CVE-2021-0092: Uncontrolled Resource Consumption
Improper access control in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...
CVE-2021-0125: Improper Initialization
Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via physical access...
PT-2022-9092
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns pointer problems in the firmware of some IntelR Processors. This could potentially allow a privileged user to escalate their privileges via local access...
PT-2022-9083
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper access control in the firmware for some IntelR Processors. This may allow an unauthenticated user to potentially enable an escalation of privilege v...
CVE-2021-0158
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0157
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0158: Improper Input Validation
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0157: Undefined Security Weakness
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0146: Undefined Security Weakness
Hardware allows activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
PT-2021-7223
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to the removal or modification of security-critical code in some IntelR Processors, potentially allowing an authenticated user to enable information disclosure...
PT-2021-4853
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper input validation in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via...
PT-2021-12915
Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an unchecked return value in the firmware for some IntelR Processors and insecure default variable initialization for the Intel BSSA DFT feature. This may...
CVE-2021-0114: Initialization of a Resource with an Insecure Default
Unchecked return value in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...
Oracle Linux 8 : microcode_ctl (ELSA-2021-2308)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2308 advisory. 4:20210216-1.20210525.0.1 - add support for UEK6 kernels - remove no longer appropriate caveats for 06-2d-07 and 06-55-04 4:20210216-1.20210525.1 -...
SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2021:1932-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1932-1 advisory. - Updated to Intel CPU Microcode 20210525 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discover...
Oracle Linux 7 : microcode_ctl (ELSA-2021-2305)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2305 advisory. 2:2.1-73.9.0.1 - for Intel, do not trigger load if on-disk microcode is not an update Orabug: 30634727 - set earlymicrocode='no' in virtualized guests ...
CVE-2021-0089
Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2020-24512
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...