K65043534: Multiple INTEL BIOS vulnerabilities

Security Advisory Description CVE-2017-5705 Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code. CVE-2017-5706 Multiple buffer overflows in kernel in Intel Server Platfo...

Improper access control

Insufficient access control in hardware abstraction driver for MEInfo software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for IntelR TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before;...

CVE-2018-3686

Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access...

Code injection

Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access...

CVE-2018-3686

Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access...

CVE-2018-3686

The CVE-2018-3686 entry affects Intel INTEL-SA-00086 Detection Tool prior to version 1.2.7.0. The vulnerability is a code injection flaw that could allow a privileged user to execute arbitrary code via local access, with impacts to confidentiality, integrity, and availability listed as high in th...

INTEL-SA-00086 Detection Tool DLL Injection Issue Advisory

Summary: A potential security vulnerability in the INTEL-SA-00086 Detection Tool may allow a privileged user to execute arbitrary code. Intel is releasing INTEL-SA-00086 Detection Tool updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3686 Description: Code...

Intel Management Engine Privilege Escalation And Buffer Overflow Vulnerabilities

Intel Management Engine is prone to privilege escalation and buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...