CVE-2022-41804: Unauthorized Error Injection Can Degrade Hardware Redundancy

Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-43505: Insufficient Control Flow Management

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...

Intel Processors Security Vulnerability

Intel Processors are American Intel Corporation's provide interpretation of computer instructions and processing of data in computer software. A security vulnerability exists in the Intel Processors BIOS firmware that originates from incorrect input validation. An attacker can exploit the...

Intel Xeon Processors Security Vulnerability

Intel Xeon Processors is an Intel Xeon family of central processing units CPUs from Intel Corporation. A security vulnerability exists in IntelR SGX and IntelR TDX of Intel Xeon Processors. An attacker can exploit the vulnerability to elevate privileges...

CVE-2022-27879: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-44611: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2022-37343: Improper Access Control

Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38083: Improper Initialization

Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

SUSE: Security Advisory (SUSE-SU-2023:3289-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-23908: Improper Access Control

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-12919

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper buffer restrictions in the BIOS firmware, which may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-4491

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to insufficient validation of user input in the BIOS firmware for some Intel processors. This may allow a privileged user to potentially enable escalation of...

PT-2023-13584

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper initialization in the BIOS firmware for some IntelR Processors, which may allow a privileged user to potentially enable information disclosure via...

PT-2023-13533 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper access control in the BIOS firmware for some IntelR Processors, which may allow a privileged user to potentially enable escalation of privilege vi...

K000135795: Downfall Attacks CVE-2022-40982

Security Advisory Description Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2022-40982 Impact Successfu...

HPESBHF04514 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall),Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4510 Gen10 System - Prior to 2.9007-20-2023 HPE ProLiant XL230k Gen10 Server - Prior to 2.9007-20-2023 HPE Apollo 4200 Gen10 Server - Prior to 2.9007-20-2023 HPE...

HPESBHF04510 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.9007-20-2023 HPE Synergy 480 Gen10 Compute Module - Prior to 2.9007-20-2023 HPE Synergy 660 Gen10 Compute Module - Prior ...

HPESBHF04515 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.8007-05-2023 HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.8007-05-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

Medium: microcode_ctl

Issue Overview: A Gather Data Sampling GDS transient execution side-channel vulnerability was found affecting certain Intel processors. This issue may allow a local attacker using gather instruction load from memory to infer stale data from previously used vector registers on the same physical...

Vulnerability fixed in Intel processors

A vulnerability has been fixed in the microcode of several Intel processors1. The vulnerability has been named "Downfall" and allows a local, authenticated malicious person to manipulate the operation of memory optimization. This allows the malicious party to gain access to memory locations...