CentOS 8 : microcode_ctl (CESA-2021:2308)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2308 advisory. - hw: vt-d related privilege escalation CVE-2020-24489 - hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 - hw:...

Exploit for Incorrect Authorization in Polkit_Project Polkit

CVE-2021-3560-Polkit-Privilege-Esclation PoC Original rese...

Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:2305)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2305-1 advisory. - hw: vt-d related privilege escalation CVE-2020-24489 - hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 - hw:...

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2021:1932-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1932-1 advisory. - Updated to Intel CPU Microcode 20210525 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discover...

GHSA-8CH4-58QP-G3MP Observable Timing Discrepancy in aaugustin websockets library

The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basicauthprotocolfactorycredentials=.... An attacker may be able to guess a password via a timing attack...

Observable Timing Discrepancy in aaugustin websockets library

The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basicauthprotocolfactorycredentials=.... An attacker may be able to guess a password via a timing attack...

SUSE-SU-2021:1963-1 Security update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-session_store

This update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-sessionstore contains the following fixes: Security fixes included in this update: crowbar-openstack: - CVE-2016-8611: Added rate limiting for the '/images' API POST method...

Ubuntu: Security Advisory (USN-4985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : MozillaFirefox, firefox-glib2, firefox-gtk3 (SUSE-SU-2019:14173-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14173-1 advisory. - Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these...

CVE-2021-0001

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

CVE-2021-0001

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

CVE-2021-0001

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

Information disclosure

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

DEBIAN-CVE-2020-24512

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24512

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Information disclosure

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0001

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

CVE-2020-24512

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24512

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24512

CVE-2020-24512 is an Intel processor microcode issue described as an observable timing discrepancy that may permit information disclosure via local access. Connected advisories/versions show the vulnerability addressed by updated Intel microcode released around 2021-06-08 (e.g., microcode-2021060...