Intel SSD Firmware May 2022 Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® Solid State Drive SSD and Intel® Optane™ SSD products which may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential...

PT-2022-3827 · Intel · Intel Ssd Dc +1

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM SSD and IntelR SSD DC Products affected versions not specified Description: The issue is related to a race condition within a thread in the firmware, potentially allowing a privileged user to enable denial of service via local...

PT-2022-3031 · Intel · Intel Optane Ssd +1

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM SSD versions affected versions not specified IntelR OptaneTM SSD DC versions affected versions not specified IntelR SSD DC versions affected versions not specified Description: A race condition in the firmware of some IntelR...

Intel® Optane SSD Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Optane™ SSD and Intel® Optane™ SSD Data Center DC products may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates and prescriptive guidance to mitigate these potential...

PT-2022-3828 · Intel · Intel Ssd +1

Name of the Vulnerable Software and Affected Versions: IntelR SSD and IntelR OptaneTM SSD Products affected versions not specified Description: The issue is related to sensitive information not being removed from resources before reuse in the firmware of some Intel SSD and Intel Optane SSD...

SUSE-SU-2022:1397-1 Security update for SUSE Manager Server 4.2

This update fixes the following issues: c3p0: - Update to version c3p0 0.9.5.5 and mchange-commons-java 0.2.19 Address CVE-2018-20433 Address CVE-2019-5427 - XML-config parsing related attacks bsc1133198 Properly implement the JDBC 4.1 abort method grafana-formula: - Version 0.7.0 Add SLES 15 SP4...

CVE-2022-25154

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability...

CVE-2022-25154

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability...

Design/Logic Flaw

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability...

CVE-2022-25154

The CVE-2022-25154 issue affects Samsung portable SSD T5 PC software prior to version 1.6.9. It is a DLL hijacking vulnerability that could allow a local attacker who already has user privileges on Windows 7, 10, or 11 to escalate privileges. The root cause is the DLL hijacking flaw in the softwa...

CVE-2022-25154

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability...

Samsung portable SSD T5 PC代码问题漏洞

Samsung portable SSD T5 PC is an official software for hard disks from Samsung South Korea. A security vulnerability exists in Samsung portable SSD T5 PC software prior to version 1.6.9, which originates from a DLL hijacking vulnerability that can be exploited by a local attacker to escalate...

ssd-vps.us Cross Site Scripting vulnerability OBB-2352386

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-7964 · Intel +3 · Intel(R) Ssd Tools +3

Name of the Vulnerable Software and Affected Versions: IntelR SSD Tools versions prior to mdadm-4.2-rc2 Description: The issue is related to a buffer overflow in the IntelR SSD Tools software, specifically in the mdadm utility, which is used for managing RAID arrays. This buffer overflow is cause...

Ubuntu Overlayfs Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule '2021 Ubuntu Overlayfs LPE', 'Description' = %q This module exploits a vulnerability in Ubuntu's implementation of overlayfs. The vulnerability is...

CVE-2021-0148

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0148

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

Information disclosure

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0148

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0148

CVE-2021-0148 relates to an information disclosure in Intel SSD DC firmware where log handling allows a locally privileged user to access sensitive log data due to inadequate filtering. Red Hat and NVD entries reiterate this issue. Intel’s advisory (Intel-SA-00535) details affected families and b...