Lucene search
K

159 matches found

CVE
CVE
added 2022/08/31 3:32 p.m.117 views

CVE-2022-2590

Astra Linux bulletin confirms CVE-2022-2590 was addressed in Linux kernel MM/GUP logic by fixing FOLL_FORCE COW security issue and removing FOLL_COW. The patch targets races where a read-only shared page could become writable via FOLL_FORCE during COW, enabling unprivileged local writes to read‑o...

7CVSS6.6AI score0.00445EPSS
Exploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2022/08/08 2:36 p.m.41 views

CVE-2022-2590

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system...

7CVSS6.7AI score0.00445EPSS
Exploits1References4
OSV
OSV
added 2022/08/08 12:0 a.m.1 views

UBUNTU-CVE-2022-2590

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system...

7CVSS7.2AI score0.00445EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2022/08/08 12:0 a.m.136 views

CVE-2022-2590

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system...

7CVSS6.7AI score0.00445EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2022/07/28 12:0 a.m.48 views

Ubuntu 16.04 ESM : Intel Microcode vulnerabilities (USN-5535-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5535-1 advisory. Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could use this to obtain sensitive...

6.8CVSS6.4AI score0.00686EPSS
Exploits0References11
Veracode
Veracode
added 2022/02/26 1:20 a.m.28 views

Denial Of Service (DoS)

intel-microcode is vulnerable to denial of service. An attacker can crash the application through the out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors...

5.4CVSS4.6AI score0.00686EPSS
Exploits0References2Affected Software4
Tenable Nessus
Tenable Nessus
added 2022/02/26 12:0 a.m.44 views

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2022:0575-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0575-1 advisory. - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of...

6.8CVSS7.1AI score0.00686EPSS
Exploits0References13
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/16 10:9 p.m.48 views

Security Bulletin: Vulnerability in Linux Kernel affects ProtecTIER: Dirty COW vulnerability (CVE-2016-5195)

Summary A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An attacker could exploit this vulnerability to gain write access to read-only memory mappings and elevated privileges on the system...

7.2CVSS1.1AI score0.93929EPSS
Exploits79Affected Software1
Mageia
Mageia
added 2022/02/15 8:50 p.m.66 views

Updated microcode packages fix security vulnerabilities

Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access CVE-2021-0127 / SA-00532...

6.8CVSS3.1AI score0.00686EPSS
Exploits0References6
NVD
NVD
added 2022/02/09 11:15 p.m.14 views

CVE-2021-33120

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access...

5.5CVSS0.00686EPSS
Exploits0References1
OSV
OSV
added 2022/02/09 11:15 p.m.1 views

DEBIAN-CVE-2021-33120

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access...

5.4CVSS6.1AI score0.00686EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/02/09 11:15 p.m.40 views

CVE-2021-33120

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access...

5.5CVSS6.5AI score0.00686EPSS
Exploits0References4
OSV
OSV
added 2022/02/09 11:15 p.m.0 views

UBUNTU-CVE-2021-33120

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access...

5.4CVSS6.4AI score0.00686EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/02/09 10:4 p.m.14 views

CVE-2021-33120

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access...

6.1AI score0.00686EPSS
Exploits0References1
CVE
CVE
added 2022/02/09 10:4 p.m.120 views

CVE-2021-33120

CVE-2021-33120 affects Intel Atom processors and is described as an out-of-bounds read in the memory subsystem under a complex microarchitectural condition, potentially enabling information disclosure or denial of service over the network for an authenticated user. Connected documents corroborate...

5.5CVSS5.3AI score0.00686EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.6 views

CVE-2021-33120

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access...

5.4AI score0.00686EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/02/08 7:9 p.m.36 views

CVE-2021-33120

A flaw was found in microcode. An out-of-bounds read under a complex microarchitectural condition in the memory subsystem for some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure or cause a denial of service via network access...

5.5CVSS4.5AI score0.00686EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2021/06/20 8:52 a.m.38 views

CVE-2018-12127

Microprocessors use a ‘load port’ subcomponent to perform load operations from memory or IO. During a load operation, the load port receives data from the memory or IO subsystem and then provides the data to the CPU registers and operations in the CPU’s pipelines. Stale load operations results ar...

6.5CVSS3.6AI score0.00515EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1792)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.74296EPSS
Exploits4References2
Intel
Intel
added 2019/11/21 12:0 a.m.24 views

2019.2 IPU – Intel® TXT Advisory

Summary: A potential security vulnerability in Intel® Trusted Execution Technology TXT with Intel® Processor Graphics may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0184 Description: Insufficie...

5.5CVSS5.4AI score0.00139EPSS
Exploits0
Rows per page
Query Builder