Major OS Players Misinterpret Intel Docs, and Now Kernels Can Be Hijacked

🗓️ 10 May 2018 15:37:07Reported by Tara SealsType

threatpost🔗 threatpost.com👁 72 Views

Major OS Players Address Intel Documentation Misinterpretation and Kernel Vulnerabilit

Reporter	Title	Published	Views	Family All 492
zdt	Microsoft Windows - POP/MOV SS Privilege Escalation Exploit	23 May 201800:00	–	zdt
zdt	Microsoft Windows #MicrosoftWindows POP/MOV SS Local Privilege Elevation Exploit	13 Jul 201800:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	3 Dec 201814:30	–	ibm
FreeBSD	FreeBSD -- Mishandling of x86 debug exceptions	8 May 201800:00	–	freebsd
Tenable Nessus	macOS 10.13.x < 10.13.5 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2018-1023)	30 May 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : kernel (ALAS-2018-1023)	30 May 201800:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (CESA-2018:1318)	31 May 201800:00	–	nessus

Source	Link
kb	www.kb.cert.org/vuls/byvendor
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
access	www.access.redhat.com/security/vulnerabilities/pop_ss
kb	www.kb.cert.org/vuls/id/631579
everdox	www.everdox.net/popss.pdf
software	www.software.intel.com/en-us/articles/intel-sdm
kb	www.kb.cert.org/vuls/id/631579

10 May 2018 15:37Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.38295

intel os vulnerability coordinated patches privilege escalation local access api sensitive memory control hijacking debug exception x86-64 architectures documentation software stacks interrupt instructions