The vulnerability of the RAPL Interface microprogramming software for Intel processors lies in the ability to disclose information through incompatibility, allowing attackers to compromise the protected information.

The vulnerability of the RAPL Interface microprogramming software for Intel processors involves the disclosure of information through incompatibility. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to writing beyond the buffer boundaries, allows attackers to enhance their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the UEFI Firmware component of Intel microprocessors lies in the lack of protection during the assignment of pointers; this allows attackers to exploit their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors lies in the lack of checks for the value of the pointer before it is reassigned. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to incomplete filtering of special elements. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to resource release errors, allows a hacker to cause a system failure.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause system failures...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

ABB Cylon Aspect 3.08.02 logYumLookup.php Authenticated File Disclosure Vulnerability

ABB Cylon Aspect version 3.08.02 suffers from an authenticated arbitrary file disclosure vulnerability. Input passed through the logFile GET parameter via the logYumLookup.php script is not properly verified before being used to download log files. This can be exploited to disclose the contents o...

RockyLinux 9 : kernel (RLSA-2024:8162)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8162 advisory. kernel: Local information disclosure on IntelR AtomR processors CVE-2023-28746 kernel: netfilter: nftflowoffload: reset dst in route object after setting...

CVE-2024-50383

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

CVE-2024-50383

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

CVE-2024-50383

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

CVE-2024-50383

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

CVE-2024-50383

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

CVE-2024-50383

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

USN-7077-1 amd64-microcode vulnerability

Enrique Nissim and Krzysztof Okupski discovered that some AMD processors did not properly restrict access to the System Management Mode SMM configuration when the SMM Lock was enabled. A privileged local attacker could possibly use this issue to further escalate their privileges and execute...

USN-7077-1: AMD Microcode vulnerability

Enrique Nissim and Krzysztof Okupski discovered that some AMD processors did not properly restrict access to the System Management Mode SMM configuration when the SMM Lock was enabled. A privileged local attacker could possibly use this issue to further escalate their privileges and execute...

PT-2024-33945

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel has a weakness related to transient execution in Linear Address Masking LAM as described in the SLAM paper. This weakness may be exploitable unless Linear Address Spac...

HPESBHF04715 rev.1 - HPE Superdome Flex and Superdome Flex 280 servers Using Certain Intel Processors, INTEL-SA-01071, 2024.3 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior to v1.90.12 HPE Superdome Flex Server - Prior to v4.0.10 CVSS Scores: | CVE | CVSS Vect...