2023.3 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates and an optional software sequence to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-40982 Description: Information exposure...

HPESBHF04502 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.8007-05-2023 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.8007-05-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

Intel Processors Security Vulnerability

Intel Processors are U.S.-based Intel Corporation that provide for the interpretation of computer instructions and the processing of data in computer software. A security vulnerability exists in Intel Processors that arises from the exposure of information via microarchitectural state after...

CVE-2023-23908

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-14226 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to insufficient control flow management in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable denial of...

fTPM Voltage Fault Injection

Bulletin ID: AMD-SB-4005 Potential Impact: Arbitrary Code Execution Severity: High Summary CVE-2023-20589 Researchers at the Technische Universität Berlin have reported the use of voltage fault injection attacks on ASP secure boot targeting fTPM. An attacker with specialized hardware and physical...

UBUNTU-CVE-2023-23908

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure via local access...

HPESBHF04519 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant e910 Server Blade - Prior to 2.0807-24-2023 HPE ProLiant e910t Server Blade - Prior to 2.0807-24-2023 HPE ProLiant m750 Server Blade - Prior to 1.6007-24-2023...

HPESBHF04521 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920 Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920d Server Blade - Prior to 1.7407-24-2023 CV...

CVE-2022-41804

Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

AMD Ryzen Security Breach

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Ryzen that originates from a vulnerability that allows an attacker to perform a voltage fault injection attack that compromises the ASP secure boot and results in arbitrary code...

CVE-2022-40982

Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-20583 Software based Power Side Channel on AMD CPUs

A potential power side-channel vulnerability in AMD processors may allow an authenticated attacker to monitor the CPU power consumption as the data in a cache line changes over time potentially resulting in a leak of sensitive information...

AMD CPU Security Vulnerability

AMD CPUs are a family of CPUs from the American company Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from allowing an authenticated attacker to monitor data changes in CPU power, leading to information disclosure...

Software based Power Side Channel on AMD CPUs

Bulletin ID: AMD-SB-7006 Potential Impact: Information disclosure Severity: Low Summary A potential leakage of data using software-based power side channels on AMD CPUs was reported to AMD. This issue has also been referred to as ‘Collide + Power’. CVE Details Refer to Glossary for explanation of...

Hardware allows activation of test or debug logic

Hardware allows activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

com.hcl.commerce:commerce-search-processors (>=9.1.12.0 <=9.1.15.0), org.apache.nifi.minifi:minifi-assembly (>=1.14.0 <=1.22.0) +7 more potentially affected by CVE-2023-36542 via org.apache.nifi:nifi-standard-processors (>=0.1.0-incubating <=1.22.0)

org.apache.nifi:nifi-standard-processors MAVEN version =0.1.0-incubating, =9.1.12.0, =1.14.0, =1.14.0, =1.14.0, =0.1.0-incubating, =1.15.0, =1.14.0, =1.22.0 - org.apache.plc4x:plc4j-nifi-plc4x-nar =0.10.0 - org.apache.plc4x:plc4j-nifi-plc4x-processors =0.10.0 Source cves: CVE-2023-36542 Source...

org.apache.nifi:nifi-jms-processors-nar (>=0.6.0 <=1.22.0) potentially affected by CVE-2023-36542 via org.apache.nifi:nifi-jms-processors (>=0.6.0 <=1.22.0)

org.apache.nifi:nifi-jms-processors MAVEN version =0.6.0, =0.6.0, =1.22.0 Source cves: CVE-2023-36542 Source advisory: OSV:GHSA-R969-8V3H-23V9...

Design/Logic Flaw

Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retrieving drivers, which allows an authenticated and authorized user to configure a location that enables custom code execution. The resolution introduces a new Required Permission fo...

Apache NiFi 代码注入漏洞

Apache NiFi is an open source tool for building reliable and secure data pipelines. It supports collecting, aggregating and transferring data from a variety of sources and provides powerful data processing and transformation capabilities. A remote code execution vulnerability exists in Apache NiF...