467 matches found
Important: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Important: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Important: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Important: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
hw: observable timing discrepancy in some Intel Processors
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
RHEL 7 : microcode_ctl (RHSA-2021:2303)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2303 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...
RHEL 7 : microcode_ctl (RHSA-2021:2301)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2301 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...
RHEL 8 : microcode_ctl (RHSA-2021:2307)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2307 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...
RHEL 7 : microcode_ctl (RHSA-2021:2305)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2305 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...
RLSA-2021:2308 Important: microcode_ctl security, bug fix and enhancement update
The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 hw: observable timing discrepancy in some Intel Processors CVE-2020-24512 hw:...
microcode_ctl security, bug fix and enhancement update
An update is available for microcodectl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel. Security...
UBUNTU-CVE-2020-24512
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Intel® IPP and SGX Software Advisory
Summary: A potential security vulnerability in the Intel® Integrated Performance Primitives IPP Crypto Library may allow information disclosure. Intel® IPP is used by Intel® Software Guard Extension SGX, and Intel is releasing software updates to mitigate this potential vulnerability. Vulnerabili...
Authentication flaw
The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basicauthprotocolfactorycredentials=.... An attacker may be able to guess a password via a timing attack...
PYSEC-2021-95
The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basicauthprotocolfactorycredentials=.... An attacker may be able to guess a password via a timing attack...
CVE-2021-33880
The CVE-2021-33880 issue affects the aaugustin websockets library for Python, before version 9.1. It describes an Observable Timing Discrepancy when HTTP Basic Authentication is enabled (basic_auth_protocol_factory(credentials=...)), allowing an attacker to guess passwords via a timing attack. A ...