Intel Fixes Critical, High-Severity Flaws Across Several Products

🗓️ 21 May 2019 21:02:56Reported by Lindsey O'DonnellType

Intel issued 34 fixes for critical, high and medium vulnerabilities in various products including a buffer overflow in Intel CSME and flaws in i915 Graphics chips and Intel NUC kit

Reporter	Title	Published	Views	Family All 252
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to multiple Kernel vulnerabilities	6 Nov 201919:05	–	ibm
BDU FSTEC	Vulnerability in the Intel Converged Security and Manageability Engine microprogramming subsystem, related to buffer overflow attacks, allows attackers to escalate their privileges.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Graphics Kernel Mode Driver for Intel i915 processors allows a hacker to exploit their privileges.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability in the built-in software of the Intel NUC Kit, related to insufficient verification of input data, allows attackers to escalate their privileges or cause service failures.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability in the subsystems of Microprogramming Software: Intel Converged Security and Manageability Engine, Intel Server Platform Services, and Intel Trusted Execution Engine (TXE). This vulnerability is related to lack of access control, allowing attackers to enhance their privileges.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Dynamic Application Loader subsystem of the Intel Converged Security and Manageability Engine allows a perpetrator to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel microprocessor microprogramming software, related to insufficient access control, allows attackers to enhance their privileges or cause service failures.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CLI command-line interface of Cisco IOS XE SD-WAN allows a attacker to execute arbitrary code with root privileges.	10 Jun 202000:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : kernel (CESA-2019:1959)	29 Jan 202100:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html
threatpost	www.threatpost.com/newsletter-sign/
threatpost	www.threatpost.com/intel-cpus-impacted-by-new-class-of-spectre-like-attacks/144728/
threatpost	www.threatpost.com/intel-zombieload-side-channel-attack-10-takeaways/144771/
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00249.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
tenforums	www.tenforums.com/windows-10-news/132589-intel-nuc-advisory-may-14-a.html
media	www.media.threatpost.com/wp-content/uploads/sites/103/2019/05/21161645/intel-NUC-.png
intel	www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.html

21 May 2019 21:02Current

8.9High risk

Vulners AI Score8.9

EPSS0.01864