530 matches found
New 'Lazy FP State Restore' Vulnerability Found in All Modern Intel CPUs
Hell Yeah! Another security vulnerability has been discovered in Intel chips that affects the processor's speculative execution technology—like Specter and Meltdown—and could potentially be exploited to access sensitive information, including encryption related data. Dubbed Lazy FP State Restore,...
CVE-2018-3665
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...
UBUNTU-CVE-2018-3665
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel...
Speculative register leakage from lazy FPU context switching
ISSUE DESCRIPTION x86 has a hardware mechanism for lazy FPU context switching. On a task switch, %cr0.ts Task Switched gets set, and the next instruction to touch floating point state raises an NM No Math, later known as Device Not Available exception. Traditionally, FPU state has been large in...
Microsoft Guidance for Lazy FP State Restore
Executive summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On June 13...
Intel Releases Security Advisory on Lazy FP State Restore Vulnerability
Intel has released recommendations to address a vulnerability—dubbed Lazy FP state restore—affecting Intel Core-based microprocessors. An attacker could exploit this vulnerability to obtain access to sensitive information. NCCIC encourages users and administrators to review Intel's Security...
KLA11291 Microsoft Guidance for Lazy Floating Point State Restore
Speculative store bypass vulnerability in Microsoft Windows systems can be exploited to bypass security restrictions. On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving...
Lazy FP State Restore
Summary: System software may utilize the Lazy FP state restore technique to delay the restoring of state until an instruction operating on that state is actually executed by the new process. Systems using Intel® Core-based microprocessors may potentially allow a local process to infer data...
openSUSE Security Update : GraphicsMagick (openSUSE-2018-518)
GraphicsMagick was updated to 1.3.29 : - Security Fixes : - GraphicsMagick is now participating in Google's oss-fuzz project - JNG: Require that the embedded JPEG image have the same dimensions as the JNG image as provided by JHDR. Avoids a heap write overflow. - MNG: Arbitrarily limit the number...
policycoreutils security, bug fix, and enhancement update
2.5-22.0.1 - Lazy unmount private, shared entry Joe Jin orabug 12560705 2.5-22 - semanage: Fix fcontext help message 1499259 - semanage: Improve semanage-user.8 man page 1079946 - semodule: Improve man page 1337192 2.5-21 - Update translations 2.5-20 - setfiles: Mention customizable types in...
ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution
The "lazyinitialize" function in lib/resolv.rb did not properly process certain filenames. A remote attacker could possibly exploit this flaw to inject and execute arbitrary commands...
ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution
The "lazyinitialize" function in lib/resolv.rb did not properly process certain filenames. A remote attacker could possibly exploit this flaw to inject and execute arbitrary commands...
ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution
The "lazyinitialize" function in lib/resolv.rb did not properly process certain filenames. A remote attacker could possibly exploit this flaw to inject and execute arbitrary commands...
ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution
The "lazyinitialize" function in lib/resolv.rb did not properly process certain filenames. A remote attacker could possibly exploit this flaw to inject and execute arbitrary commands...
CVE-2017-17790
The lazyinitialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernelopen, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input ma...
UBUNTU-CVE-2017-17790
The lazyinitialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernelopen, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input ma...
SQL Injection Vulnerability in Lazy WorkPass OA Web Intelligent Office System
Lazy work pass OA network intelligent office system is suitable for enterprises and institutions of the general network office software, the system uses B / S operation mode, free version for small and medium-sized enterprises. There is a SQL injection vulnerability in the OA Network Intelligent...
LAZY IPTV - Base64 encoded String, Customized SSL, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application LAZY IPTV published at the 'play' market has multiple vulnerabilities...
OracleVM 3.3 / 3.4 : policycoreutils (OVMSA-2016-0157)
The remote OracleVM system is missing necessary patches to address critical security updates : - Lazy unmount private, shared entryJoe Jinorabug 12560705 - sandbox: create a new session for sandboxed processes Resolves: CVE-2016-7545 - Update translations Resolves: rhbz819794 - Fix sepolgen test...