CVE-2020-12931: Undefined Security Weakness

Improper parameters handling in the AMD Secure Processor ASP kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...

PT-2022-9757 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified Description: The issue is related to insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE. This may allow an authenticated attacker with...

PT-2022-9736 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD secure processor affected versions not specified Description: An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD...

AMD Secure Processor security vulnerabilities

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, which stems from improper parameter handling in the kernel and could allow a privileged attacker to elevate privileges, resulting in a loss of...

AMD Secure Processor security vulnerabilities

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, which arises from improper parameter handling in the driver and could allow an attacker with privileges to elevate privileges, resulting in a...

AMD Secure Processor security vulnerabilities

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP that originates from an attacker with local access to the system who can make unauthorized modifications to the security configuration of the SO...

AMD Secure Processor security vulnerabilities

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP that stems from inadequate memory cleanup in the Trusted Execution Environment TEE, which could allow an authenticated attacker to have the...

CVE-2021-26393

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...

HPESBHF04380 rev.3 - Certain HPE ProLiant BL/DL/ML Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6410-20-2022 HPE ProLiant MicroServer Gen10 Plus v2 - Prior to 1.6410-20-2022 HPE ProLiant ML30 Gen10 Plus server - Prior to...

HPESBHF04374 rev.2 - Certain HPE Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL170r Gen9 Server - Prior to v3.0408-04-2022 HPE ProLiant XL190r Gen9 Server - Prior to v3.0408-04-2022 HPE ProLiant XL230a Gen9 Server - Prior to v3.0408-04-202...

HPESBHF04375 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreVirtual 3000 File Controller - Prior to 3.0408042022 HPE StoreEasy 1450 Storage - Prior to 3.0408042022 HPE StoreEasy 1550 Storage - Prior to 3.0408042022 HPE StoreEa...

AMD Processors security vulnerabilities

AMD Processors is a processor from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Processors. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

MediaTek chip buffer error vulnerability

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek gpu drm that stems from improper input validation leading to out-of-bounds writes...

MediaTek chip input verification error vulnerability

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from uninitialized data in the isp that may be written out-of-bounds, which could lead to a local privilege escalation that requires system execution...

MediaTek chip buffer error vulnerability

MediaTek isp is a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek isp, which stems from a lack of boundary checking, leading to out-of-bounds writes...

MediaTek chip buffer error vulnerability

MediaTek isp is a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek isp that stems from an incorrect boundary check that results in an out-of-bounds write...

HPESBHF04379 rev.2 - Certain HPE ProLiant Moonshot Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge -Prior to 1.9610-13-2022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21198 |...

sudo -- Potential out-of-bounds write for small passwords

CVE.org reports: Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to sudo by entering a password of seven...

CVE-2022-43995

Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer...

hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions

A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions...