openssl: bn_sqrx8x_internal carry bug on x86_64

There is a carry propagating bug in the x8664 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely...

SUSE-SU-2018:1945-1 Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP2)

This update for the Linux Kernel 4.4.114-9264 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

CVE-2018-3667

Installation tool IPDT Intel Processor Diagnostic Tool 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation...

CVE-2018-3668

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

CVE-2018-3668

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

Code injection

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

Information disclosure

Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges...

CVE-2018-3668

Unquoted service paths in Intel Processor Diagnostic Tool IPDT before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code...

CVE-2018-3667

CVE-2018-3667 affects Intel IPDT (Intel Processor Diagnostic Tool) version 4.1.0.24, where the installation tool incorrectly sets permissions on installed files. This misconfiguration can enable execution of arbitrary code and elevate privileges on the host. Public sources in the provided set des...

CVE-2018-3652

Existing UEFI setting restrictions for DCI Direct Connect Interface in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces...

CVE-2018-3652

CVE-2018-3652 relates to UEFI DCI (Direct Connect Interface) restrictions on 5th/6th gen Intel Xeon E3, Xeon Scalable, and Xeon D processors. The issue could allow a limited physical presence attacker to access platform secrets via debug interfaces when DCI policy/UEFI controls are in effect. The...

CVE-2018-3668

CVE-2018-3668 concerns Intel’s Processor Diagnostic Tool (IPDT). Connected sources confirm an elevation of privilege via an unquoted service path in IPDT before version 4.1.0.27, allowing a local attacker to potentially execute arbitrary code. Affected software: IPDT prior to 4.1.0.27 (Windows en...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

Intel® Converged Security Management Engine (Intel® CSME) 11.x issue

Summary: In an effort to continuously improve the robustness of the Intel® Converged Security Management Engine Intel® CSME, Intel has performed a security review of its Intel® CSME with the objective of continuously enhancing firmware resilience. Description: In an effort to continuously improve...

Race condition

In the FastRPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

[SECURITY] Fedora 27 Update: qemu-2.10.1-4.fc27

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

HPSBHF03586 rev. 1 - DCI Policy Update

Potential Security Impact Information disclosure and escalation of privilege via limited physical presence. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel platforms, starting with Skylake, support a USB 3-based debugging interface a.k.a. Direct...

Intel Processor Diagnostic Tool (IPDT) Privilege Escalation Vulnerability

Intel Processor Diagnostic Tool IPDT versions prior to 4.1.0.27 suffer from three code execution and privilege escalation vulnerabilities. Hi @ll, the executable installers of Intel's Processor Diagnostic Tool IPDT before v4.1.0.27 have three vulnerabilities^Wbeginner's errors which all allow...

Intel Processor Diagnostic Tool (IPDT) Privilege Escalation

Hi @ll, the executable installers of Intel's Processor Diagnostic Tool IPDT before v4.1.0.27 have three vulnerabilities^Wbeginner's errors which all allow arbitrary code execution with escalation of privilege, plus a fourth which allows denial of service. Intel published advisory SA-00140 on...