4349 matches found
PT-2022-14456 · Unknown · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible out of bounds write due to improper input validation in the smc intc request fiq function of arm gic.c. This could lead to local escalatio...
CVE-2022-26861
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM...
CVE-2022-26860
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM...
CVE-2022-26861
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM...
CVE-2022-26860
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM...
CVE-2022-26858
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...
PT-2022-18111 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Insecure Automated Optimization vulnerability in Dell BIOS. A local authenticated malicious user could exploit this vulnerability by sending malicious input via...
Dell BIOS 授权问题漏洞
Dell BIOS is embedded software on a small memory chip SMI on a computer motherboard from Dell, Inc. The Dell BIOS has a security vulnerability that stems from the inclusion of an incorrect authentication vulnerability, which could be exploited by a locally authenticated malicious user by sending...
Dell BIOS 安全漏洞
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. The Dell BIOS has a security vulnerability that stems from the inclusion of a competitive condition vulnerability that can be exploited by a local attacker by sending malicious input via SMI to bypass...
The vulnerability of the kvm_irq_delivery_to_apic_fast() function in the KVM virtualization subsystem of the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the kvmirqdeliverytoapicfast function in the KVM virtualization subsystem of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...
CVE-2022-34383
Dell Edge Gateway 5200 EGW versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM...
AZL-10794 CVE-2022-2153 affecting package kernel for versions less than 5.15.67.1-4
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...
UBUNTU-CVE-2022-2153
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...
PT-2022-22156 · Dell · Dell Edge Gateway 5200
Name of the Vulnerable Software and Affected Versions: Dell Edge Gateway 5200 EGW versions prior to 1.03.10 Description: The issue allows a local malicious user to potentially exploit an operating system command injection vulnerability. This can be done by using a System Management Interrupt SMI ...
The vulnerability of the Software Guard eXtensions (SGX) processor implementation allows a hacker to gain access to protected information.
The vulnerability of the Software Guard eXtensions SGX processor implementation relates to the possibility of accessing uninitialized data that remains in the APIC Advanced Programmable Interrupt Controller registers. Exploiting this vulnerability can allow an attacker to gain access to protected...
Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability
A flaw was found in hw. The APIC can operate in xAPIC mode also known as a legacy mode, in which APIC configuration registers are exposed through a memory-mapped I/O MMIO page. This flaw allows an attacker who can execute code on a target CPU to query the APIC configuration page. When reading the...
hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability
A flaw was found in hw. The APIC can operate in xAPIC mode also known as a legacy mode, in which APIC configuration registers are exposed through a memory-mapped I/O MMIO page. This flaw allows an attacker who can execute code on a target CPU to query the APIC configuration page. When reading the...
PT-2022-4127
Name of the Vulnerable Software and Affected Versions IntelR Processors versions 10 through 12 IntelR Processors affected versions not specified Description The issue is related to improper isolation of shared resources in some IntelR Processors, which may allow a privileged user to potentially...
CVE-2022-26858
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...