Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows that stems from a security issue with some Intel processors. The following products and versions are affected:Windows 10 Version...

PT-2022-2972

Name of the Vulnerable Software and Affected Versions AMD processors affected versions not specified Description A potential issue in AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack, potentially enabling information disclosure. The vulnerabili...

HPESBHF04326 rev.3 - HPE Superdome Flex, Superdome Flex 280, Integrity MC990 X, and SGI UV 300 Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server - Prior to 5.2.16 BIOS in product bundle 2022.06 HPE Superdome Flex Server - Prior to 3.55.8 HPE Superdome Flex 280 Server - Prior to 1.35.12 SG...

HPESBHF04320 rev.2 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Server - Prior to 2.6605172022 HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6606012022 HPE ProLiant DL20 Gen10 Server - Prior to 2.5804142022 HP...

HPESBHF04322 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant DX190r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant...

HPESBHF04307 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Processors, INTEL-SA-00615, 2022.1 IPU - Intel Processors MMIO Stale Data Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to H051.9205182022 HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m710x-L Server Blade - Prior to...

PT-2022-2973

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to observable behavioral power management throttling and errors in the dynamic frequency adjustment process of Intel processor microcode, specifically concernin...

Intel® Processors June 2022 Security Update

Intel has informed HP of potential security vulnerabilities in Memory Mapped I/O MMIO for some Intel® Processors which may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

PT-2022-2931

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to the incomplete cleanup of multi-core shared buffers for some IntelR Processors, which may allow an authenticated user to potentially enable information...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows that stems from a security issue with some Intel processors. The following products and versions are affected:Windows 10 Version...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The vulnerability stems from a security issue with Intel processors. The following products and versions are...

PT-2022-4299

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to the incomplete cleanup of microarchitectural fill buffers on some IntelR Processors, which may allow an authenticated user to potentially enable information...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The vulnerability stems from a security issue with some Intel processors. The following products and versions are...

Software Developer Guidance for Power Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-24436 Description: Observable behavioral in power management throttling for some Inte...

Frequency Scaling Timing Power Side-Channels

Bulletin ID: AMD-SB-1038 Potential Impact: Information Disclosure Severity: Medium Summary AMD is aware of the academic research paper titled “Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86”. AMD has been notified the researchers intend to submit their paper to...

PT-2022-2971 · Intel +1 · Intel Processors +1

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper clearance or release of resources in Intel processor microcode, which may allow an attacker to cause a denial of service. It involves improper inpu...

Amazon Linux 2 : microcode_ctl (ALAS-2022-1800)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1800 advisory. A flaw was found in hw. Processor optimization removal or modification of security-critical code for some IntelR processors may...

HPESBHF04315 rev.1 - HPE Superdome Flex Servers Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU - Intel Xeon Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to 3.55.8 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21131 |...

Medium: microcode_ctl

Issue Overview: A flaw was found in hw. Processor optimization removal or modification of security-critical code for some IntelR processors may potentially allow an authenticated user to enable information disclosure via local access. CVE-2022-21151 A flaw was found in hw. Incomplete cleanup in...

Linux kernel Information Disclosure

The vulnerability of the Linux operating system’s kernel is related to a flaw in the Cortex and Neoverse processors from Arm. Exploiting this vulnerability can allow attackers to disclose sensitive information by circumventing the eIBRS and CSV2 protection mechanisms...