Page 6 of 61 results (0.031 seconds)

CVSS: 8.2EPSS: 0%CPEs: 568EXPL: 0

CVE-2019-11137

https://notcve.org/view.php?id=CVE-2019-11137

14 Nov 2019 — Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. Una comprobación de entrada insuficiente en el firmware del sistema para Intel® Xeon® Scalable Processors, Intel® Xeon®... • https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS • CWE-20: Improper Input Validation •

CVSS: 6.7EPSS: 0%CPEs: 568EXPL: 0

CVE-2019-11136

https://notcve.org/view.php?id=CVE-2019-11136

14 Nov 2019 — Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. Un control de acceso insuficiente en el firmware del sistema para Intel® Xeon® Scalable Processors, 2nd Generation Intel® Xeon® Scalable Processors y Intel® Xeon® Processors D Family, puede... • https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS •

CVSS: 6.0EPSS: 0%CPEs: 117EXPL: 0

CVE-2019-11139 – FreeBSD Security Advisory - FreeBSD-SA-19:26.mcu

https://notcve.org/view.php?id=CVE-2019-11139

12 Nov 2019 — Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access. Una comprobación de condiciones inapropiadas en la interfaz de modulación de voltaje para algunos Intel® Xeon® Scalable Processors, puede habilitar a un usuario privilegiado para permitir potencialmente una denegación de servicio por medio de un acceso local. From time to time Intel releases new CPU microcode to addr... • http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00045.html • CWE-754: Improper Check for Unusual or Exceptional Conditions •

CVSS: 4.8EPSS: 0%CPEs: 482EXPL: 0

CVE-2019-11184

https://notcve.org/view.php?id=CVE-2019-11184

16 Sep 2019 — A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access. Una condición de carrera en microprocesadores específicos que usan la asignación de la memoria caché DDIO y RDMA de Intel (R), puede permitir a un usuario autenticado habilitar potencialmente la divulgación de información parcial por medio de un acceso adyacente. • https://arxiv.org/abs/1909.04841 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 7.6EPSS: 0%CPEs: 164EXPL: 0

CVE-2018-3652

https://notcve.org/view.php?id=CVE-2018-3652

10 Jul 2018 — Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces. Las restricciones de configuración UEFI existentes para DCI (Direct Connect Interface) en la familia E3 de procesadores Intel Xeon de 5ª y 6ª generación, los procesadores Intel Xeon Scalable y la familia D de proc... • https://security.netapp.com/advisory/ntap-20180802-0001 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.9EPSS: 0%CPEs: 1095EXPL: 0

CVE-2018-3693 – Kernel: speculative bounds check bypass store

https://notcve.org/view.php?id=CVE-2018-3693

10 Jul 2018 — Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis. Los sistemas con microprocesadores que emplean la ejecución especulativa y la predicción de ramas podría permitir la divulgación no autorizada de información a un atacante con acceso de usuario local mediante un desbordamiento de búfer especulativo y el análisis de canal lateral. ... • https://access.redhat.com/errata/RHSA-2018:2384 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.0EPSS: 0%CPEs: 311EXPL: 0

CVE-2017-5703

https://notcve.org/view.php?id=CVE-2017-5703

03 Apr 2018 — Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service. La configuración de SPI Flash, en plataformas basadas en múltiples plataformas de Intel, permite que un atacante local altere el comportamiento del flash SPI. Esto podría conducir a una denegación de servicio (DoS). • http://www.securitytracker.com/id/1040626 • CWE-269: Improper Privilege Management •

CVSS: 5.6EPSS: 0%CPEs: 1065EXPL: 1

CVE-2018-9056

https://notcve.org/view.php?id=CVE-2018-9056

27 Mar 2018 — Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope. Los sistemas con microprocesadores que utilizan ejecución especulativa podrían permitir la revelación de información no autorizada a un atacante con acceso de usuario local mediante un ataque de canal lateral en el predictor de saltos... • http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.6EPSS: 92%CPEs: 1059EXPL: 6

CVE-2017-5754 – hw: cpu: speculative execution permission faults handling

https://notcve.org/view.php?id=CVE-2017-5754

04 Jan 2018 — Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. Los sistemas con microprocesadores con ejecución especulativa y predicción indirecta de ramas podrían permitir la revelación no autorizada de información al atacante con acceso de usuario local mediante un análisis de la caché de los datos. An industry-wide issue was found in the way m... • https://github.com/ionescu007/SpecuCheck • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.6EPSS: 94%CPEs: 1467EXPL: 10

CVE-2017-5753 – Multiple CPUs - 'Spectre' Information Disclosure

https://notcve.org/view.php?id=CVE-2017-5753

04 Jan 2018 — Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Los sistemas con microprocesadores con ejecución especulativa y predicción de ramas podrían permitir la revelación no autorizada de información al atacante con acceso de usuario local mediante un análisis de un canal lateral. An industry-wide issue was found in the way many modern microprocessor designs have imp... • https://packetstorm.news/files/id/145645 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-203: Observable Discrepancy •