AMD processors security vulnerabilities

AMD Processors is a processor from the American company AMD. AMD processors suffers from a security vulnerability that stems from the fact that AMD processors can infer load instructions, leading to a potential data leak...

CVE-2021-26400: Undefined Security Weakness

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage...

PT-2022-3790 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to the use of an out-of-range pointer offset in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalatio...

PT-2022-3803 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to insufficient control flow management in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-3804 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper access control in the BIOS authenticated code module for some Intel Processors. This may allow a privileged user to potentially enable escalation o...

Ciphertext Side Channels on AMD SEV

Bulletin ID: AMD-SB-1033 Potential Impact: Data leakage Severity: Medium Summary AMD received notification of a potential security vulnerability where data in specific cryptographic algorithms can be inferred in a SEV guest by monitoring the ciphertext values over time. Researchers from the...

AMD EPYC DRTM UApp security vulnerability

AMD EPYC is an x86 architecture server microprocessor product line from AMD Semiconductor, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in the AMD EPYC DRTM UApp. The vulnerability arises from a partial initialization of the DRTM UApp, which...

AMD EPYC SEV-ES TMR security vulnerabilities

AMD EPYC is an x86 server microprocessor product line from AMD, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC SEV-ES TMR. An attacker could exploit this vulnerability to cause a loss of memory integrity in SNP-active VMs...

PT-2022-3825 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an out-of-bounds write in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via...

PT-2022-4314 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware for some Intel Processors. This may allow a privileged user to potentially enable escalation of privilege via...

PT-2022-4323 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an observable behavioral discrepancy in some IntelR Processors, which may allow an authorized user to potentially enable information disclosure via local...

PT-2022-3789 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to deficiencies in handling exceptional states in the BIOS microcode of Intel processors. It may allow a privileged user to potentially enable escalation of...

NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0046)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has microcodectl packages installed that are affected by multiple vulnerabilities: - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially...

PT-2022-4322 · Intel +3 · 3Rd Generation Intel Xeon Scalable Processors +3

Name of the Vulnerable Software and Affected Versions: 3rd Generation IntelR XeonR Scalable Processors versions before MR7 Description: The issue is related to improper access control in the BIOS microcode of Intel processors, which may allow a local attacker to potentially enable information...

HPESBHF04290 rev.1 - Certain HPE ProLiant DL/ML/MicroServer Servers Using Intel Processors, INTEL-SA-00617, 2022.1 IPU, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to 2.5804142022 HPE ProLiant DL20 Gen10 Plus server - Prior to 1.5804182022 HPE ProLiant ML30 Gen10 Server - Prior to 2.5804142022 HPE...

HPESBST04295 rev.1 - Certain HPE Storage Products Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1460 Storage - Prior to 2.6404212022 - Use BIOS family U32 HPE StoreEasy 1560 Storage - Prior to 2.6404212022 - Use BIOS family U33 HPE...

Intel 2022.1 IPU BIOS Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® Processors, in BIOS firmware or BIOS authenticated code module for some Intel® Processors, and in the Intel® Software Guard Extensions SGX Platform which may allow escalation of privilege, information disclosure...

2022.1 IPU - Intel® Xeon® Advisory

Summary: Potential security vulnerabilities in some Intel® Xeon® Processors may allow information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-21131 Description: Improper access control for...

Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-129-01)

The version of kernel-generic installed on the remote host is prior to 5.15.38 / 5.15.38smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-129-01 advisory. - Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may...

NewStart CGSL MAIN 6.02 : microcode_ctl Multiple Vulnerabilities (NS-SA-2022-0060)

The remote NewStart CGSL host, running version MAIN 6.02, has microcodectl packages installed that are affected by multiple vulnerabilities: - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable...