K000148584: Intel Xeon Processor vulnerability CVE-2024-23918

Security Advisory Description Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-23918 Impact There is no impact; F5 products are not...

K000148583: Intel QAT Engine for OpenSSL vulnerability CVE-2024-33617

Security Advisory Description Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access. CVE-2024-33617 Impact There is no impact; F5 products are not affected by this vulnerability. Security...

SUSE: Security Advisory (SUSE-SU-2024:3995-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:3995-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3995-1 advisory. - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic ...

Fedora 41 : microcode_ctl (2024-28ea86c8aa)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-28ea86c8aa advisory. - Update to upstream 2.1-47. 20241112 - Update of 06-8f-04/0x87 SPR-SP E0/S1 microcode in intel-ucode/06-8f-05 from revision 0x2b0005c0 up to...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20241112 release bsc1233313 CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enabl...

SUSE-SU-2024:3995-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

SUSE CVE-2024-28885

Observable discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

SUSE CVE-2024-31074

Observable timing discrepancy in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

SUSE CVE-2024-33617

Insufficient control flow management in some IntelR QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access...

ucode-intel-20241112-1.1 on GA media (moderate)

ucode-intel-20241112-1.1 on GA media Announcement ID: openSUSE-SU-2024:14496-1 Rating: moderate Cross-References: CVE-2024-21820 CVE-2024-21853 CVE-2024-23918 CVSS scores: CVE-2024-21820 SUSE : 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N CVE-2024-21820 SUSE : 8.5...

Intel QAT Engine for OpenSSL software information disclosure vulnerability (CNVD-2025-30766)

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. An information disclosure vulnerability exists in Intel QAT Engine for OpenSSL software, which can be exploited by...

Intel QAT Engine for OpenSSL software Control Flow Management Insufficiency Vulnerability

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. A control flow management deficiency vulnerability exists in Intel QAT Engine for OpenSSL software, which can be...

Intel QAT Engine for OpenSSL software information disclosure vulnerability

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. An information disclosure vulnerability exists in Intel QAT Engine for OpenSSL software, which can be exploited by...

Intel® Xeon® Processor with Intel® SGX Advisory

Summary: Potential security vulnerabilities in some Intel® Xeon® processors using Intel® Software Guard Extensions Intel SGX may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-23918 Description...

SUSE CVE-2024-21820

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2024-21853

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

SUSE CVE-2024-23918

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

The vulnerability in the set of development libraries for Intel Distribution for GDB software relates to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability in the set of development libraries for Intel Distribution for GDB software is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack allows a hacker to gain elevated privileges.

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...