CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-28885

CVE-2024-28885 (with CVE-2024-31074 and CVE-2024-33617) concerns observable/disclosure risks in Intel(R) QAT Engine for OpenSSL. The vulnerabilities affect Intel QAT Engine for OpenSSL software before version v1.6.1; exploitation is network-accessible. SUSE advisories reference fixes in the 1.7.0...

CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

CVE-2024-33617

CVE-2024-33617 is associated with Intel(R) QAT Engine for OpenSSL. The attached advisories/plugins confirm the vulnerability as: insufficient control flow management in the QAT Engine before version v1.6.1 may allow information disclosure via network access. Affected components in SUSE advisories...

CVE-2024-37024

Uncontrolled search path for some ACAT software maintained by IntelR for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37024

CVE-2024-37024 affects Intel ACAT for Windows prior to 3.11.0. The issue is an uncontrolled search path that may let an authenticated local user escalate privileges. Impacted component: Intel ACAT software (Windows). Remediation: update to version 3.11.0 or later as recommended by Intel. Other so...

CVE-2024-37024

Uncontrolled search path for some ACAT software maintained by IntelR for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39285

Improper access control in UEFI firmware in some IntelR Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-39285

CVE-2024-39285 describes improper access control in UEFI firmware affecting Intel Server Board families such as M70KLP, M20NTP, M10JNP2SB, and S2600BP(S). The root cause is an access control weakness in the UEFI firmware that may allow a privileged local attacker to disclose sensitive information...

CVE-2024-39285

Improper access control in UEFI firmware in some IntelR Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-39609

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39609

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39609

CVE-2024-39609 concerns improper access control in the UEFI firmware of Intel Server Board M70KLP (and related Intel Server Boards). The Red Hat and Intel advisories identify the root cause as improper access control in UEFI, enabling a privileged user to potentially escalate privileges via local...

CVE-2024-39811

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39811

CVE-2024-39811 affects Intel Server M20NTP Family UEFI firmware. The root cause is improper input validation in the UEFI firmware, which may allow a privileged user to escalate privileges via local access. The vulnerability is documented with local attack vector and high-impact CVSS metrics (3.1:...

CVE-2024-39811

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-40885

CVE-2024-40885 concerns use-after-free in the UEFI firmware of Intel Server M20NTP BIOS. The vulnerability, exploitable via local access with high privileges, could enable privilege escalation. Intel’s advisories and related entries (Intel SA-01175 and vendor security pages) indicate affected Int...