Intel 2024.1 IPU - BIOS March 2024 Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® Processors and/or BIOS Firmware for some Intel® Processors which may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing firmware updates to mitigate this potential...

PT-2024-8294

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the v4l2 ctrl handler init function. Exploitation of this issue may allow an attacker to cause a denial of service. The memory leak occurs in the...

PT-2023-36751

Уязвимость функции ipu bridge connect sensor модуля drivers/media/pci/intel/ipu-bridge.c драйвера мультимедийных устройств на шине PCI ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-38186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ipu-bridge module where a null pointer dereference can occur during the parsing of SSDB/PLD warnings in the ipu bridge parse rotation and ipu...

Intel 2023.3 IPU – Chipset Firmware August 2023 Security Update

Intel has informed HP of potential vulnerabilities identified in the Intel® Converged Security Management Engine CSME, Active Management Technology AMT, and Intel® Standard Manageability software that might allow escalation of privilege or denial of service. Intel is releasing updates to mitigate...

Intel 2023.1 IPU – BIOS February 2023 Security Updates

Intel has informed HP of potential vulnerabilities identified in some Intel® Processors with Intel® Software Guard Extensions SGX that might allow information disclosure and potential vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT...

Intel 2022.3 IPU - Chipset Firmware November 2022 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Chipset Firmware in Intel® Converged Security and Manageability Engine CSME, Intel® Active Management Technology AMT, and Intel® Standard Manageability, which might allow escalation of privilege or denial of service. Intel...

HPESBNS04337 rev.1 - Certain HPE NonStop Products Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE NonStop NS8 X4 CPU - Prior to 2.6605-17-2022 - SPR T0918L02^AAR HPE NonStop NS4 X4 CPU - Prior to 2.6605-17-2022 - SPR T0918L02^AAR HPE NonStop...

CVE-2022-20155

In ipucorejqsmsgtransportkernelwritesync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Race condition

In ipucorejqsmsgtransportkernelwritesync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-14387

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible use-after-free due to a race condition in the ipu core jqs msg transport kernel write sync function of ipu-core-jqs-msg-transport.c. This could lead to local escalation of privilege...

CVE-2022-20155: Concurrent Execution using Shared Resource with Improper Synchronization

In ipucorejqsmsgtransportkernelwritesync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Intel 2021.2 IPU – BIOS November 2021 Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® Processors which may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP has...

drm graphics drivers -- Local privilege escalation and denial of service

Intel reports: As part of IPU 2019.2, INTEL-SA-00242 advises that insufficient access control may allow an authenticated user to potentially enable escalation of privilege via local access. INTEL-SA-00260 advises that insufficient access control may allow an authenticated user to potentially enab...

Tuning Capacity Tips for SecureSphere Database Activity Monitoring

You have Imperva SecureSphere Database Activity Monitoring DAM up and running. You’ve deployed the system and configured your business audit policies. So, what’s next? In a previous post I discussed the capacity management challenges of database monitoring solutions, in this post I’ll elaborate o...

ipu.org XSS vulnerability

Vulnerable URL: http://www.ipu.org/parline-e/ElectoralSystem.asp?LANG=ENG"SUBREGION=S11=1&Submit1;=Launch+query Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...