Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-46103 (GCVE-0-2023-46103)
Vulnerability from cvelistv5
Published
2024-05-16 20:47
Modified
2024-08-02 20:37
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- denial of service
- CWE-1281 - Sequence of Processor Instructions Leads to Unexpected Behavior
Summary
Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| n/a | Intel(R) Core(TM) Ultra Processors |
Version: See references |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-46103",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-21T15:00:27.957400Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:22:14.674Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T20:37:39.394Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html",
"tags": [
"x_transferred"
],
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Intel(R) Core(TM) Ultra Processors",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "See references"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "denial of service",
"lang": "en"
},
{
"cweId": "CWE-1281",
"description": "Sequence of Processor Instructions Leads to Unexpected Behavior",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-16T20:47:08.458Z",
"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"shortName": "intel"
},
"references": [
{
"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"assignerShortName": "intel",
"cveId": "CVE-2023-46103",
"datePublished": "2024-05-16T20:47:08.458Z",
"dateReserved": "2023-11-03T03:00:20.849Z",
"dateUpdated": "2024-08-02T20:37:39.394Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2023-46103\",\"sourceIdentifier\":\"secure@intel.com\",\"published\":\"2024-05-16T21:15:59.137\",\"lastModified\":\"2024-11-21T08:27:54.237\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.\"},{\"lang\":\"es\",\"value\":\"La secuencia de instrucciones del procesador genera un comportamiento inesperado en los procesadores Intel(R) Core(TM) Ultra que pueden permitir que un usuario autenticado habilite potencialmente la denegaci\u00f3n de servicio a trav\u00e9s del acceso local.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@intel.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":4.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secure@intel.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1281\"}]}],\"references\":[{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\",\"source\":\"secure@intel.com\"},{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\", \"name\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T20:37:39.394Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-46103\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-21T15:00:27.957400Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:25.110Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.7, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"n/a\", \"product\": \"Intel(R) Core(TM) Ultra Processors\", \"versions\": [{\"status\": \"affected\", \"version\": \"See references\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\", \"name\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"denial of service\"}, {\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1281\", \"description\": \"Sequence of Processor Instructions Leads to Unexpected Behavior\"}]}], \"providerMetadata\": {\"orgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"shortName\": \"intel\", \"dateUpdated\": \"2024-05-16T20:47:08.458Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-46103\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-08-02T20:37:39.394Z\", \"dateReserved\": \"2023-11-03T03:00:20.849Z\", \"assignerOrgId\": \"6dda929c-bb53-4a77-a76d-48e79601a1ce\", \"datePublished\": \"2024-05-16T20:47:08.458Z\", \"assignerShortName\": \"intel\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
rhsa-2024:9401
Vulnerability from csaf_redhat
Published
2024-11-12 09:30
Modified
2025-09-25 15:09
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)
* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
* kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)
* kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)
* kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)
* intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)
* intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)\n\n* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)\n\n* kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)\n\n* kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)\n\n* kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)\n\n* intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)\n\n* intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:9401",
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
"url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2270698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270698"
},
{
"category": "external",
"summary": "2270700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270700"
},
{
"category": "external",
"summary": "2270701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270701"
},
{
"category": "external",
"summary": "2270703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270703"
},
{
"category": "external",
"summary": "2270704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270704"
},
{
"category": "external",
"summary": "2292296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292296"
},
{
"category": "external",
"summary": "2292300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292300"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9401.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-25T15:09:22+00:00",
"generator": {
"date": "2025-09-25T15:09:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2024:9401",
"initial_release_date": "2024-11-12T09:30:07+00:00",
"revision_history": [
{
"date": "2024-11-12T09:30:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-11-12T09:30:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T15:09:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20240910-1.el9_5.src",
"product": {
"name": "microcode_ctl-4:20240910-1.el9_5.src",
"product_id": "microcode_ctl-4:20240910-1.el9_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20240910-1.el9_5?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product": {
"name": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product_id": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20240910-1.el9_5?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20240910-1.el9_5.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch"
},
"product_reference": "microcode_ctl-4:20240910-1.el9_5.noarch",
"relates_to_product_reference": "BaseOS-9.5.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20240910-1.el9_5.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
},
"product_reference": "microcode_ctl-4:20240910-1.el9_5.src",
"relates_to_product_reference": "BaseOS-9.5.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-22655",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270698"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the Intel Xeon Processor\u0027s microcode. This issue may allow a malicious actor to achieve local privilege escalation when using Intel SGX or Intel TDX features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-22655"
},
{
"category": "external",
"summary": "RHBZ#2270698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-22655",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22655"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html"
}
],
"release_date": "2024-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)"
},
{
"cve": "CVE-2023-28746",
"cwe": {
"id": "CWE-1342",
"name": "Information Exposure through Microarchitectural State after Transient Execution"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270700"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Atom Processor\u0027s microcode. This issue may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Atom(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-28746"
},
{
"category": "external",
"summary": "RHBZ#2270700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-28746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Atom(R) processors"
},
{
"cve": "CVE-2023-38575",
"cwe": {
"id": "CWE-1303",
"name": "Non-Transparent Sharing of Microarchitectural Resources"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270701"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure in some Intel(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-38575"
},
{
"category": "external",
"summary": "RHBZ#2270701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270701"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure in some Intel(R) processors"
},
{
"cve": "CVE-2023-39368",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270703"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Possible Denial of Service on Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-39368"
},
{
"category": "external",
"summary": "RHBZ#2270703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-39368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39368"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Possible Denial of Service on Intel(R) Processors"
},
{
"cve": "CVE-2023-43490",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270704"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Xeon D Processors with Intel SGX. This issue may allow a local attacker to achieve sensitive information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43490"
},
{
"category": "external",
"summary": "RHBZ#2270704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43490",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode"
},
{
"cve": "CVE-2023-45733",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The hardware logic contains race conditions in some Intel(R) processors that may allow an authenticated user to enable partial information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Race conditions in some Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "RHBZ#2292296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45733"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "intel-microcode: Race conditions in some Intel(R) Processors"
},
{
"cve": "CVE-2023-46103",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra processors that may allow an authenticated user to enable a denial of service via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "RHBZ#2292300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46103"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors"
}
]
}
rhsa-2024_9401
Vulnerability from csaf_redhat
Published
2024-11-12 09:30
Modified
2024-11-24 18:07
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)
* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
* kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)
* kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)
* kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)
* intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)
* intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)\n\n* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)\n\n* kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)\n\n* kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)\n\n* kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)\n\n* intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)\n\n* intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:9401",
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
"url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2270698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270698"
},
{
"category": "external",
"summary": "2270700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270700"
},
{
"category": "external",
"summary": "2270701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270701"
},
{
"category": "external",
"summary": "2270703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270703"
},
{
"category": "external",
"summary": "2270704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270704"
},
{
"category": "external",
"summary": "2292296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292296"
},
{
"category": "external",
"summary": "2292300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292300"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9401.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2024-11-24T18:07:33+00:00",
"generator": {
"date": "2024-11-24T18:07:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:9401",
"initial_release_date": "2024-11-12T09:30:07+00:00",
"revision_history": [
{
"date": "2024-11-12T09:30:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-11-12T09:30:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-24T18:07:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20240910-1.el9_5.src",
"product": {
"name": "microcode_ctl-4:20240910-1.el9_5.src",
"product_id": "microcode_ctl-4:20240910-1.el9_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20240910-1.el9_5?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product": {
"name": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product_id": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20240910-1.el9_5?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20240910-1.el9_5.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch"
},
"product_reference": "microcode_ctl-4:20240910-1.el9_5.noarch",
"relates_to_product_reference": "BaseOS-9.5.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20240910-1.el9_5.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
},
"product_reference": "microcode_ctl-4:20240910-1.el9_5.src",
"relates_to_product_reference": "BaseOS-9.5.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-22655",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270698"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the Intel Xeon Processor\u0027s microcode. This issue may allow a malicious actor to achieve local privilege escalation when using Intel SGX or Intel TDX features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-22655"
},
{
"category": "external",
"summary": "RHBZ#2270698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-22655",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22655"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html"
}
],
"release_date": "2024-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)"
},
{
"cve": "CVE-2023-28746",
"cwe": {
"id": "CWE-1342",
"name": "Information Exposure through Microarchitectural State after Transient Execution"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270700"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Atom Processor\u0027s microcode. This issue may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Atom(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-28746"
},
{
"category": "external",
"summary": "RHBZ#2270700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-28746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Atom(R) processors"
},
{
"cve": "CVE-2023-38575",
"cwe": {
"id": "CWE-1303",
"name": "Non-Transparent Sharing of Microarchitectural Resources"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270701"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure in some Intel(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-38575"
},
{
"category": "external",
"summary": "RHBZ#2270701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270701"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure in some Intel(R) processors"
},
{
"cve": "CVE-2023-39368",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270703"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Possible Denial of Service on Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-39368"
},
{
"category": "external",
"summary": "RHBZ#2270703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-39368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39368"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Possible Denial of Service on Intel(R) Processors"
},
{
"cve": "CVE-2023-43490",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270704"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Xeon D Processors with Intel SGX. This issue may allow a local attacker to achieve sensitive information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43490"
},
{
"category": "external",
"summary": "RHBZ#2270704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43490",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode"
},
{
"cve": "CVE-2023-45733",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The hardware logic contains race conditions in some Intel(R) processors that may allow an authenticated user to enable partial information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Race conditions in some Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "RHBZ#2292296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45733"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "intel-microcode: Race conditions in some Intel(R) Processors"
},
{
"cve": "CVE-2023-46103",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra processors that may allow an authenticated user to enable a denial of service via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "RHBZ#2292300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46103"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors"
}
]
}
RHSA-2024:9401
Vulnerability from csaf_redhat
Published
2024-11-12 09:30
Modified
2025-09-25 15:09
Summary
Red Hat Security Advisory: microcode_ctl security update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)
* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
* kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)
* kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)
* kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)
* intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)
* intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)\n\n* kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)\n\n* kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)\n\n* kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)\n\n* kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)\n\n* intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)\n\n* intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:9401",
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
"url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2270698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270698"
},
{
"category": "external",
"summary": "2270700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270700"
},
{
"category": "external",
"summary": "2270701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270701"
},
{
"category": "external",
"summary": "2270703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270703"
},
{
"category": "external",
"summary": "2270704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270704"
},
{
"category": "external",
"summary": "2292296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292296"
},
{
"category": "external",
"summary": "2292300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292300"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9401.json"
}
],
"title": "Red Hat Security Advisory: microcode_ctl security update",
"tracking": {
"current_release_date": "2025-09-25T15:09:22+00:00",
"generator": {
"date": "2025-09-25T15:09:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2024:9401",
"initial_release_date": "2024-11-12T09:30:07+00:00",
"revision_history": [
{
"date": "2024-11-12T09:30:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-11-12T09:30:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T15:09:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20240910-1.el9_5.src",
"product": {
"name": "microcode_ctl-4:20240910-1.el9_5.src",
"product_id": "microcode_ctl-4:20240910-1.el9_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20240910-1.el9_5?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product": {
"name": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product_id": "microcode_ctl-4:20240910-1.el9_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20240910-1.el9_5?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20240910-1.el9_5.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch"
},
"product_reference": "microcode_ctl-4:20240910-1.el9_5.noarch",
"relates_to_product_reference": "BaseOS-9.5.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20240910-1.el9_5.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
},
"product_reference": "microcode_ctl-4:20240910-1.el9_5.src",
"relates_to_product_reference": "BaseOS-9.5.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-22655",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270698"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the Intel Xeon Processor\u0027s microcode. This issue may allow a malicious actor to achieve local privilege escalation when using Intel SGX or Intel TDX features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-22655"
},
{
"category": "external",
"summary": "RHBZ#2270698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-22655",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22655"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html"
}
],
"release_date": "2024-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)"
},
{
"cve": "CVE-2023-28746",
"cwe": {
"id": "CWE-1342",
"name": "Information Exposure through Microarchitectural State after Transient Execution"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270700"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Atom Processor\u0027s microcode. This issue may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Atom(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-28746"
},
{
"category": "external",
"summary": "RHBZ#2270700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-28746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Atom(R) processors"
},
{
"cve": "CVE-2023-38575",
"cwe": {
"id": "CWE-1303",
"name": "Non-Transparent Sharing of Microarchitectural Resources"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270701"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure in some Intel(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-38575"
},
{
"category": "external",
"summary": "RHBZ#2270701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270701"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure in some Intel(R) processors"
},
{
"cve": "CVE-2023-39368",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270703"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Possible Denial of Service on Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-39368"
},
{
"category": "external",
"summary": "RHBZ#2270703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-39368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39368"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Possible Denial of Service on Intel(R) Processors"
},
{
"cve": "CVE-2023-43490",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270704"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Xeon D Processors with Intel SGX. This issue may allow a local attacker to achieve sensitive information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43490"
},
{
"category": "external",
"summary": "RHBZ#2270704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43490",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode"
},
{
"cve": "CVE-2023-45733",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The hardware logic contains race conditions in some Intel(R) processors that may allow an authenticated user to enable partial information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Race conditions in some Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "RHBZ#2292296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45733"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "intel-microcode: Race conditions in some Intel(R) Processors"
},
{
"cve": "CVE-2023-46103",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra processors that may allow an authenticated user to enable a denial of service via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "RHBZ#2292300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46103"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-11-12T09:30:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.noarch",
"BaseOS-9.5.0.GA:microcode_ctl-4:20240910-1.el9_5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors"
}
]
}
rhea-2024:7620
Vulnerability from csaf_redhat
Published
2024-10-03 11:25
Modified
2025-09-25 13:39
Summary
Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update
Notes
Topic
An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.
Details
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Bug Fix(es) and Enhancement(s):
* microcode_ctl: kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) [rhel-9.4.0] (JIRA:RHEL-30860)
* microcode_ctl: kernel: Local information disclosure on Intel(R) Atom(R) processors [rhel-9.4.0] (JIRA:RHEL-30863)
* microcode_ctl: kernel: Local information disclosure in some Intel(R) processors [rhel-9.4.0] (JIRA:RHEL-30866)
* microcode_ctl: kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode [rhel-9.4.0] (JIRA:RHEL-30869)
* microcode_ctl: kernel: Possible Denial of Service on Intel(R) Processors [rhel-9.4.0] (JIRA:RHEL-30872)
* microcode_ctl: kernel: Local information disclosure on Intel(R) Atom(R) processors [rhel-9.4.z] (JIRA:RHEL-48717)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.",
"title": "Topic"
},
{
"category": "general",
"text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nBug Fix(es) and Enhancement(s):\n\n* microcode_ctl: kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) [rhel-9.4.0] (JIRA:RHEL-30860)\n\n* microcode_ctl: kernel: Local information disclosure on Intel(R) Atom(R) processors [rhel-9.4.0] (JIRA:RHEL-30863)\n\n* microcode_ctl: kernel: Local information disclosure in some Intel(R) processors [rhel-9.4.0] (JIRA:RHEL-30866)\n\n* microcode_ctl: kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode [rhel-9.4.0] (JIRA:RHEL-30869)\n\n* microcode_ctl: kernel: Possible Denial of Service on Intel(R) Processors [rhel-9.4.0] (JIRA:RHEL-30872)\n\n* microcode_ctl: kernel: Local information disclosure on Intel(R) Atom(R) processors [rhel-9.4.z] (JIRA:RHEL-48717)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHEA-2024:7620",
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhea-2024_7620.json"
}
],
"title": "Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update",
"tracking": {
"current_release_date": "2025-09-25T13:39:19+00:00",
"generator": {
"date": "2025-09-25T13:39:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHEA-2024:7620",
"initial_release_date": "2024-10-03T11:25:16+00:00",
"revision_history": [
{
"date": "2024-10-03T11:25:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-03T11:25:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T13:39:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20230808-2.20240531.1.el9_4.src",
"product": {
"name": "microcode_ctl-4:20230808-2.20240531.1.el9_4.src",
"product_id": "microcode_ctl-4:20230808-2.20240531.1.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20240531.1.el9_4?arch=src\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"product": {
"name": "microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"product_id": "microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20240531.1.el9_4?arch=noarch\u0026epoch=4"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch"
},
"product_reference": "microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"relates_to_product_reference": "BaseOS-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-4:20230808-2.20240531.1.el9_4.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
},
"product_reference": "microcode_ctl-4:20230808-2.20240531.1.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-22655",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270698"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the Intel Xeon Processor\u0027s microcode. This issue may allow a malicious actor to achieve local privilege escalation when using Intel SGX or Intel TDX features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-22655"
},
{
"category": "external",
"summary": "RHBZ#2270698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-22655",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22655"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22655"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html"
}
],
"release_date": "2024-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-03T11:25:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R)"
},
{
"cve": "CVE-2023-28746",
"cwe": {
"id": "CWE-1342",
"name": "Information Exposure through Microarchitectural State after Transient Execution"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270700"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Atom Processor\u0027s microcode. This issue may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Atom(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-28746"
},
{
"category": "external",
"summary": "RHBZ#2270700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-28746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28746"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-03T11:25:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Atom(R) processors"
},
{
"cve": "CVE-2023-38575",
"cwe": {
"id": "CWE-1303",
"name": "Non-Transparent Sharing of Microarchitectural Resources"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270701"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel processors that may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure in some Intel(R) processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-38575"
},
{
"category": "external",
"summary": "RHBZ#2270701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270701"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38575"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-03T11:25:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure in some Intel(R) processors"
},
{
"cve": "CVE-2023-39368",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270703"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Possible Denial of Service on Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-39368"
},
{
"category": "external",
"summary": "RHBZ#2270703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-39368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39368"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39368"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-03T11:25:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Possible Denial of Service on Intel(R) Processors"
},
{
"cve": "CVE-2023-43490",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2024-03-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270704"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in some Intel Xeon D Processors with Intel SGX. This issue may allow a local attacker to achieve sensitive information disclosure, impacting the data confidentiality of the targeted system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43490"
},
{
"category": "external",
"summary": "RHBZ#2270704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43490",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43490"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html"
}
],
"release_date": "2024-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-03T11:25:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode"
},
{
"cve": "CVE-2023-45733",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The hardware logic contains race conditions in some Intel(R) processors that may allow an authenticated user to enable partial information disclosure via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Race conditions in some Intel(R) Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "RHBZ#2292296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45733"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45733"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-03T11:25:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "intel-microcode: Race conditions in some Intel(R) Processors"
},
{
"cve": "CVE-2023-46103",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-05-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292300"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in intel-microcode. The sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra processors that may allow an authenticated user to enable a denial of service via local access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "RHBZ#2292300",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292300"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46103"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103"
},
{
"category": "external",
"summary": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514",
"url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514"
},
{
"category": "external",
"summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
],
"release_date": "2024-05-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-03T11:25:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2024:7620"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch",
"BaseOS-9.4.0.Z.MAIN.EUS:microcode_ctl-4:20230808-2.20240531.1.el9_4.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors"
}
]
}
CERTFR-2024-AVI-0713
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une injection de code indirecte à distance (XSS).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | Tanzu | Cflinuxfs4 versions antérieures à 1.99.0 | ||
| VMware | Tanzu | Platform Automation Toolkit versions 4.2.x antérieures à 4.2.8 | ||
| VMware | Tanzu | Operations Manager Image versions 2.8.x antérieures à 2.8.16 | ||
| VMware | Tanzu | Platform Automation Toolkit versions 4.4.x antérieures à 4.4.32 | ||
| VMware | Tanzu | Operations Manager versions 2.7.x antérieures à 2.7.25 | ||
| VMware | Tanzu | Platform Automation Toolkit versions 4.3.x antérieures à 4.3.5 | ||
| VMware | Tanzu | Operations Manager versions 2.9.x antérieures à 2.9.12 | ||
| VMware | Tanzu | Platform Automation Toolkit versions 5.1.x antérieures à 5.1.2 | ||
| VMware | Tanzu | Tanzu Greenplum pour Kubernetes versions 1.x antérieures à 1.2.0 | ||
| VMware | Tanzu | Tanzu Greenplum pour Kubernetes versions 2.x antérieures à 2.0.0 | ||
| VMware | Tanzu | Platform Automation Toolkit versions 4.0.x antérieures à 4.0.13 | ||
| VMware | Tanzu | Operations Manager versions 3.x LTS-T antérieures à 3.0.30+LTS-T | ||
| VMware | Tanzu | Platform Automation Toolkit versions 4.1.x antérieures à 4.1.13 | ||
| VMware | Tanzu | Operations Manager versions 2.10.x antérieures à 2.10.75 | ||
| VMware | Tanzu | Platform Automation Toolkit versions 5.0.x antérieures à 5.0.25 | ||
| VMware | Tanzu | Xenial Stemcells versions antérieures à 621.969 | ||
| VMware | Tanzu | Operations Manager Image versions 3.x LTS-T antérieures à 3.0.30+LTS-T | ||
| VMware | Tanzu | CF Deployment versions antérieures à 41.0.0 | ||
| VMware | Tanzu | Cflinuxfs3 versions antérieures à 0.390.0 | ||
| VMware | Tanzu | Jammy Stemcells versions antérieures à 1.486 | ||
| VMware | Tanzu | Operations Manager Image versions 2.10.x antérieures à 2.10.75 | ||
| VMware | Tanzu | Operations Manager Image versions 2.7.x antérieures à 2.7.25 | ||
| VMware | Tanzu | Operations Manager versions 2.8.x antérieures à 2.8.16 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Cflinuxfs4 versions ant\u00e9rieures \u00e0 1.99.0",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions 4.2.x ant\u00e9rieures \u00e0 4.2.8",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager Image versions 2.8.x ant\u00e9rieures \u00e0 2.8.16",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions 4.4.x ant\u00e9rieures \u00e0 4.4.32",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager versions 2.7.x ant\u00e9rieures \u00e0 2.7.25",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions 4.3.x ant\u00e9rieures \u00e0 4.3.5",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager versions 2.9.x ant\u00e9rieures \u00e0 2.9.12",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions 5.1.x ant\u00e9rieures \u00e0 5.1.2",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Greenplum pour Kubernetes versions 1.x ant\u00e9rieures \u00e0 1.2.0",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Greenplum pour Kubernetes versions 2.x ant\u00e9rieures \u00e0 2.0.0",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions 4.0.x ant\u00e9rieures \u00e0 4.0.13",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager versions 3.x LTS-T ant\u00e9rieures \u00e0 3.0.30+LTS-T",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions 4.1.x ant\u00e9rieures \u00e0 4.1.13",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager versions 2.10.x ant\u00e9rieures \u00e0 2.10.75",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions 5.0.x ant\u00e9rieures \u00e0 5.0.25",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Xenial Stemcells versions ant\u00e9rieures \u00e0 621.969",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager Image versions 3.x LTS-T ant\u00e9rieures \u00e0 3.0.30+LTS-T",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "CF Deployment versions ant\u00e9rieures \u00e0 41.0.0",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Cflinuxfs3 versions ant\u00e9rieures \u00e0 0.390.0",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Jammy Stemcells versions ant\u00e9rieures \u00e0 1.486",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager Image versions 2.10.x ant\u00e9rieures \u00e0 2.10.75",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager Image versions 2.7.x ant\u00e9rieures \u00e0 2.7.25",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Operations Manager versions 2.8.x ant\u00e9rieures \u00e0 2.8.16",
"product": {
"name": "Tanzu",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2023-7104",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7104"
},
{
"name": "CVE-2023-46103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46103"
},
{
"name": "CVE-2024-33602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33602"
},
{
"name": "CVE-2023-50868",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50868"
},
{
"name": "CVE-2023-28746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28746"
},
{
"name": "CVE-2016-9840",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9840"
},
{
"name": "CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"name": "CVE-2024-33600",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33600"
},
{
"name": "CVE-2024-33599",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33599"
},
{
"name": "CVE-2024-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1013"
},
{
"name": "CVE-2019-9511",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
},
{
"name": "CVE-2023-3164",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3164"
},
{
"name": "CVE-2018-25032",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
},
{
"name": "CVE-2023-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38575"
},
{
"name": "CVE-2022-37434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
},
{
"name": "CVE-2024-33601",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33601"
},
{
"name": "CVE-2016-9841",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9841"
},
{
"name": "CVE-2024-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38428"
},
{
"name": "CVE-2023-47855",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47855"
},
{
"name": "CVE-2022-40735",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40735"
},
{
"name": "CVE-2022-48622",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48622"
},
{
"name": "CVE-2023-50387",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50387"
},
{
"name": "CVE-2024-26256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26256"
},
{
"name": "CVE-2023-43490",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43490"
},
{
"name": "CVE-2024-3651",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3651"
},
{
"name": "CVE-2023-45745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45745"
},
{
"name": "CVE-2023-22655",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22655"
},
{
"name": "CVE-2023-39368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39368"
},
{
"name": "CVE-2024-34064",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34064"
},
{
"name": "CVE-2024-6387",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6387"
},
{
"name": "CVE-2019-9513",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
},
{
"name": "CVE-2024-34397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34397"
},
{
"name": "CVE-2023-45733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45733"
},
{
"name": "CVE-2024-28182",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28182"
}
],
"initial_release_date": "2024-08-23T00:00:00",
"last_revision_date": "2024-08-23T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0713",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-08-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
},
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits VMware. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une injection de code indirecte \u00e0 distance (XSS).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24790",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24790"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24759",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24759"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24757",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24757"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24726",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24726"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24730",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24730"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24754",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24754"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24749",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24749"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24761",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24761"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24724",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24724"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24703",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24703"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24763",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24763"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24746",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24746"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24760",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24760"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24758",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24758"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24729",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24729"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24722",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24722"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24750",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24750"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24728",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24728"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24731",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24731"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24762",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24762"
},
{
"published_at": "2024-08-22",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 24704",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24704"
}
]
}
CERTFR-2025-AVI-0855
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Juniper Networks | Junos OS | Junos OS versions 24.4 antérieures à 24.4R2 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions antérieures à 22.4R3-S8-EVO | ||
| Juniper Networks | Junos OS | Junos OS versions 23.4 antérieures à 23.4R2-S5 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 23.2-EVO antérieures à 23.2R2-S4-EVO | ||
| Juniper Networks | Junos OS | Junos OS versions antérieures à 22.4R3-S8 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 24.2-EVO antérieures à 24.2R2-S2-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 24.4-EVO antérieures à 24.4R2-EVO | ||
| Juniper Networks | Junos Space | Junos Space versions antérieures à 24.1R4 | ||
| Juniper Networks | Security Director | Security Director Policy Enforcer versions antérieures à 23.1R1 Hotpatch v3 | ||
| Juniper Networks | Junos Space | Junos Space Security Director versions antérieures à 24.1R4 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 23.4-EVO antérieures à 23.4R2-S5-EVO | ||
| Juniper Networks | Junos OS | Junos OS versions 23.2 antérieures à 23.2R2-S4 | ||
| Juniper Networks | Junos OS | Junos OS versions 24.2 antérieures à 24.2R2-S1 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Junos OS versions 24.4 ant\u00e9rieures \u00e0 24.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 22.4R3-S8-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 23.4 ant\u00e9rieures \u00e0 23.4R2-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 23.2-EVO ant\u00e9rieures \u00e0 23.2R2-S4-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions ant\u00e9rieures \u00e0 22.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 24.2-EVO ant\u00e9rieures \u00e0 24.2R2-S2-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 24.4-EVO ant\u00e9rieures \u00e0 24.4R2-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos Space versions ant\u00e9rieures \u00e0 24.1R4",
"product": {
"name": "Junos Space",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Security Director Policy Enforcer versions ant\u00e9rieures \u00e0 23.1R1 Hotpatch v3",
"product": {
"name": "Security Director",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos Space Security Director versions ant\u00e9rieures \u00e0 24.1R4",
"product": {
"name": "Junos Space",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 23.4-EVO ant\u00e9rieures \u00e0 23.4R2-S5-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 23.2 ant\u00e9rieures \u00e0 23.2R2-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 24.2 ant\u00e9rieures \u00e0 24.2R2-S1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-24795",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24795"
},
{
"name": "CVE-2024-36903",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36903"
},
{
"name": "CVE-2023-44431",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44431"
},
{
"name": "CVE-2021-47606",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-47606"
},
{
"name": "CVE-2025-59993",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59993"
},
{
"name": "CVE-2025-59997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59997"
},
{
"name": "CVE-2023-7104",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7104"
},
{
"name": "CVE-2025-59995",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59995"
},
{
"name": "CVE-2024-21235",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21235"
},
{
"name": "CVE-2023-28466",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28466"
},
{
"name": "CVE-2024-36921",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36921"
},
{
"name": "CVE-2025-59986",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59986"
},
{
"name": "CVE-2025-60009",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-60009"
},
{
"name": "CVE-2025-59989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59989"
},
{
"name": "CVE-2024-26897",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26897"
},
{
"name": "CVE-2023-46103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46103"
},
{
"name": "CVE-2024-27052",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27052"
},
{
"name": "CVE-2023-2235",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2235"
},
{
"name": "CVE-2025-59999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59999"
},
{
"name": "CVE-2025-59994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59994"
},
{
"name": "CVE-2024-4076",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4076"
},
{
"name": "CVE-2025-59967",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59967"
},
{
"name": "CVE-2022-24805",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24805"
},
{
"name": "CVE-2024-12797",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12797"
},
{
"name": "CVE-2023-3390",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3390"
},
{
"name": "CVE-2024-37356",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37356"
},
{
"name": "CVE-2024-47538",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47538"
},
{
"name": "CVE-2023-4004",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4004"
},
{
"name": "CVE-2024-21823",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21823"
},
{
"name": "CVE-2025-59991",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59991"
},
{
"name": "CVE-2024-5564",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5564"
},
{
"name": "CVE-2024-26600",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26600"
},
{
"name": "CVE-2023-28746",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28746"
},
{
"name": "CVE-2023-52864",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52864"
},
{
"name": "CVE-2025-26600",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26600"
},
{
"name": "CVE-2024-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3596"
},
{
"name": "CVE-2024-27280",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27280"
},
{
"name": "CVE-2024-36929",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36929"
},
{
"name": "CVE-2023-35788",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35788"
},
{
"name": "CVE-2025-59982",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59982"
},
{
"name": "CVE-2024-1975",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1975"
},
{
"name": "CVE-2023-43785",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43785"
},
{
"name": "CVE-2024-30205",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30205"
},
{
"name": "CVE-2018-17247",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17247"
},
{
"name": "CVE-2025-60004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-60004"
},
{
"name": "CVE-2023-51594",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51594"
},
{
"name": "CVE-2024-22025",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22025"
},
{
"name": "CVE-2023-50229",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50229"
},
{
"name": "CVE-2025-59974",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59974"
},
{
"name": "CVE-2025-26598",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26598"
},
{
"name": "CVE-2018-3824",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3824"
},
{
"name": "CVE-2024-40928",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40928"
},
{
"name": "CVE-2024-43398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43398"
},
{
"name": "CVE-2024-8508",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8508"
},
{
"name": "CVE-2024-36020",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36020"
},
{
"name": "CVE-2021-45105",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45105"
},
{
"name": "CVE-2025-59981",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59981"
},
{
"name": "CVE-2023-31248",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31248"
},
{
"name": "CVE-2024-1737",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1737"
},
{
"name": "CVE-2023-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25193"
},
{
"name": "CVE-2021-4104",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4104"
},
{
"name": "CVE-2024-30203",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30203"
},
{
"name": "CVE-2023-3090",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3090"
},
{
"name": "CVE-2024-35937",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35937"
},
{
"name": "CVE-2025-59968",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59968"
},
{
"name": "CVE-2023-51592",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51592"
},
{
"name": "CVE-2025-59990",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59990"
},
{
"name": "CVE-2021-22146",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22146"
},
{
"name": "CVE-2025-59978",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59978"
},
{
"name": "CVE-2024-25629",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25629"
},
{
"name": "CVE-2024-36017",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36017"
},
{
"name": "CVE-2024-24806",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24806"
},
{
"name": "CVE-2024-27434",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27434"
},
{
"name": "CVE-2023-47038",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47038"
},
{
"name": "CVE-2024-35852",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35852"
},
{
"name": "CVE-2024-38558",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38558"
},
{
"name": "CVE-2025-59992",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59992"
},
{
"name": "CVE-2024-35845",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35845"
},
{
"name": "CVE-2021-41072",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41072"
},
{
"name": "CVE-2025-60000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-60000"
},
{
"name": "CVE-2022-24807",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24807"
},
{
"name": "CVE-2024-47607",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47607"
},
{
"name": "CVE-2024-27065",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27065"
},
{
"name": "CVE-2024-36005",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36005"
},
{
"name": "CVE-2023-45866",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45866"
},
{
"name": "CVE-2023-27349",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27349"
},
{
"name": "CVE-2023-0464",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0464"
},
{
"name": "CVE-2015-5377",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5377"
},
{
"name": "CVE-2023-48161",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48161"
},
{
"name": "CVE-2022-24810",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24810"
},
{
"name": "CVE-2024-33621",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33621"
},
{
"name": "CVE-2024-27983",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27983"
},
{
"name": "CVE-2025-60001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-60001"
},
{
"name": "CVE-2024-5742",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5742"
},
{
"name": "CVE-2023-50230",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50230"
},
{
"name": "CVE-2025-52960",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52960"
},
{
"name": "CVE-2024-36922",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36922"
},
{
"name": "CVE-2025-59996",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59996"
},
{
"name": "CVE-2024-39487",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39487"
},
{
"name": "CVE-2024-27982",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27982"
},
{
"name": "CVE-2023-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38575"
},
{
"name": "CVE-2024-35911",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35911"
},
{
"name": "CVE-2025-59957",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59957"
},
{
"name": "CVE-2025-59958",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59958"
},
{
"name": "CVE-2021-41043",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41043"
},
{
"name": "CVE-2018-17244",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17244"
},
{
"name": "CVE-2019-12900",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12900"
},
{
"name": "CVE-2024-39908",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39908"
},
{
"name": "CVE-2025-26597",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26597"
},
{
"name": "CVE-2024-36971",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36971"
},
{
"name": "CVE-2023-2603",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2603"
},
{
"name": "CVE-2024-41946",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41946"
},
{
"name": "CVE-2023-3776",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3776"
},
{
"name": "CVE-2024-42934",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-42934"
},
{
"name": "CVE-2023-51580",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51580"
},
{
"name": "CVE-2024-35848",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35848"
},
{
"name": "CVE-2024-27417",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27417"
},
{
"name": "CVE-2023-21102",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21102"
},
{
"name": "CVE-2024-27281",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27281"
},
{
"name": "CVE-2025-59983",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59983"
},
{
"name": "CVE-2024-36941",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36941"
},
{
"name": "CVE-2024-2236",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2236"
},
{
"name": "CVE-2024-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38428"
},
{
"name": "CVE-2024-35969",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35969"
},
{
"name": "CVE-2021-45046",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45046"
},
{
"name": "CVE-2025-60006",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-60006"
},
{
"name": "CVE-2024-36489",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36489"
},
{
"name": "CVE-2015-1427",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1427"
},
{
"name": "CVE-2024-38575",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38575"
},
{
"name": "CVE-2024-35899",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35899"
},
{
"name": "CVE-2024-35823",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35823"
},
{
"name": "CVE-2024-40954",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40954"
},
{
"name": "CVE-2024-9632",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9632"
},
{
"name": "CVE-2023-38408",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38408"
},
{
"name": "CVE-2025-26595",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26595"
},
{
"name": "CVE-2024-26868",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26868"
},
{
"name": "CVE-2023-43787",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43787"
},
{
"name": "CVE-2023-43786",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43786"
},
{
"name": "CVE-2024-8235",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8235"
},
{
"name": "CVE-2023-4147",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4147"
},
{
"name": "CVE-2025-59977",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59977"
},
{
"name": "CVE-2023-6004",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6004"
},
{
"name": "CVE-2023-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3610"
},
{
"name": "CVE-2025-26596",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26596"
},
{
"name": "CVE-2024-4603",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4603"
},
{
"name": "CVE-2022-48622",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48622"
},
{
"name": "CVE-2021-42550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42550"
},
{
"name": "CVE-2021-44228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
},
{
"name": "CVE-2024-26828",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26828"
},
{
"name": "CVE-2025-59998",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59998"
},
{
"name": "CVE-2024-26808",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26808"
},
{
"name": "CVE-2024-30204",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30204"
},
{
"name": "CVE-2025-60002",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-60002"
},
{
"name": "CVE-2023-35001",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35001"
},
{
"name": "CVE-2024-27282",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27282"
},
{
"name": "CVE-2018-3831",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3831"
},
{
"name": "CVE-2023-43490",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43490"
},
{
"name": "CVE-2025-59976",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59976"
},
{
"name": "CVE-2025-59980",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59980"
},
{
"name": "CVE-2025-26599",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26599"
},
{
"name": "CVE-2024-47615",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47615"
},
{
"name": "CVE-2018-3823",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3823"
},
{
"name": "CVE-2023-22655",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22655"
},
{
"name": "CVE-2024-6126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6126"
},
{
"name": "CVE-2023-4911",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4911"
},
{
"name": "CVE-2023-39368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39368"
},
{
"name": "CVE-2021-44832",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44832"
},
{
"name": "CVE-2024-26853",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26853"
},
{
"name": "CVE-2025-59975",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59975"
},
{
"name": "CVE-2025-0624",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0624"
},
{
"name": "CVE-2025-59987",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59987"
},
{
"name": "CVE-2024-40958",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40958"
},
{
"name": "CVE-2018-3826",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3826"
},
{
"name": "CVE-2025-26601",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26601"
},
{
"name": "CVE-2024-52337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52337"
},
{
"name": "CVE-2025-59985",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59985"
},
{
"name": "CVE-2025-11198",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11198"
},
{
"name": "CVE-2022-24806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24806"
},
{
"name": "CVE-2023-32233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32233"
},
{
"name": "CVE-2024-35789",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35789"
},
{
"name": "CVE-2024-26327",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26327"
},
{
"name": "CVE-2015-3253",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3253"
},
{
"name": "CVE-2025-59964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59964"
},
{
"name": "CVE-2025-59988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59988"
},
{
"name": "CVE-2024-21210",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21210"
},
{
"name": "CVE-2024-2511",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2511"
},
{
"name": "CVE-2024-34397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34397"
},
{
"name": "CVE-2023-45733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45733"
},
{
"name": "CVE-2021-40153",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40153"
},
{
"name": "CVE-2024-6655",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6655"
},
{
"name": "CVE-2024-41123",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41123"
},
{
"name": "CVE-2024-27049",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27049"
},
{
"name": "CVE-2025-59984",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59984"
},
{
"name": "CVE-2025-52961",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52961"
},
{
"name": "CVE-2023-51589",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51589"
},
{
"name": "CVE-2024-21217",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21217"
},
{
"name": "CVE-2024-28182",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28182"
},
{
"name": "CVE-2021-3903",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3903"
},
{
"name": "CVE-2024-35800",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35800"
},
{
"name": "CVE-2023-2124",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2124"
},
{
"name": "CVE-2023-51596",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51596"
},
{
"name": "CVE-2025-60010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-60010"
},
{
"name": "CVE-2023-51764",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51764"
},
{
"name": "CVE-2025-26594",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26594"
},
{
"name": "CVE-2024-6409",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6409"
},
{
"name": "CVE-2024-49761",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49761"
},
{
"name": "CVE-2022-24808",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24808"
},
{
"name": "CVE-2025-59962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59962"
},
{
"name": "CVE-2024-21208",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21208"
},
{
"name": "CVE-2020-11023",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11023"
},
{
"name": "CVE-2024-40961",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40961"
}
],
"initial_release_date": "2025-10-09T00:00:00",
"last_revision_date": "2025-10-09T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0855",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-10-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Juniper Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper Networks",
"vendor_advisories": [
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103140",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Multiple-XSS-vulnerabilities-resolved-in-24-1R4-release"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103141",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R4-release"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103163",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-Multiple-OS-command-injection-vulnerabilities-fixed-CVE-2025-60006"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103168",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Device-allows-login-for-user-with-expired-password-CVE-2025-60010"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103171",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Reflected-client-side-HTTP-parameter-pollution-vulnerability-in-web-interface-CVE-2025-59977"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103167",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-When-a-user-with-the-name-ftp-or-anonymous-is-configured-unauthenticated-filesystem-access-is-allowed-CVE-2025-59980"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103156",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-ACX7024-ACX7024X-ACX7100-32C-ACX7100-48L-ACX7348-ACX7509-When-specific-valid-multicast-traffic-is-received-on-the-L3-interface-a-vulnerable-device-evo-pfemand-crashes-and-restarts-CVE-2025-59967"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103437",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Security-Director-Policy-Enforcer-An-unrestricted-API-allows-a-network-based-unauthenticated-attacker-to-deploy-malicious-vSRX-images-to-VMWare-NSX-Server-CVE-2025-11198"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103172",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Flooding-device-with-inbound-API-calls-leads-to-WebUI-and-CLI-management-access-DoS-CVE-2025-59975"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103157",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Juniper-Security-Director-Insufficient-authorization-for-sensitive-resources-in-web-interface-CVE-2025-59968"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103170",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Arbitrary-file-download-vulnerability-in-web-interface-CVE-2025-59976"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103139",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Security-Director-Multiple-vulnerabilities-resolved-in-24-1R4"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103151",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-With-BGP-sharding-enabled-change-in-indirect-next-hop-can-cause-RPD-crash-CVE-2025-59962"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103153",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-SRX4700-When-forwarding-options-sampling-is-enabled-any-traffic-destined-to-the-RE-will-cause-the-forwarding-line-card-to-crash-and-restart-CVE-2025-59964"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103147",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-PTX-Series-When-firewall-filter-rejects-traffic-these-packets-are-erroneously-sent-to-the-RE-CVE-2025-59958"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103144",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-PTX-Series-except-PTX10003-An-unauthenticated-adjacent-attacker-sending-specific-valid-traffic-can-cause-a-memory-leak-in-cfmman-leading-to-FPC-crash-and-restart-CVE-2025-52961"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103143",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-Receipt-of-specific-SIP-packets-in-a-high-utilization-situation-causes-a-flowd-crash-CVE-2025-52960"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103146",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-EX4600-Series-and-QFX5000-Series-An-attacker-with-physical-access-can-open-a-persistent-backdoor-CVE-2025-59957"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103138",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Security-Director-Multiple-vulnerabilities-resolved-in-24-1R4-by-upgrading-Log4j-Java-library-to-2-23-1-and-ElasticSearch-to-6-8-17"
},
{
"published_at": "2025-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA103165",
"url": "https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Specific-BGP-EVPN-update-message-causes-rpd-crash-CVE-2025-60004"
}
]
}
CERTFR-2024-AVI-0397
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
- Bibliothèque Libva iotg-lin-gfx-libva toutes verions
- Bibliothèque Libva versions antérieures à 2.20.0
- Installateur Endurance Gaming Mode versions antérieures à 1.3.937.0
- Intel Advisor versions antérieures à 2024.0
- Intel Agilex 7 FPGA et SoC FPGA versions antérieures à 2.9.0
- Intel Arc & Iris Xe Graphics versions antérieures à 31.0.101.5081
- Intel Arc Control versions antérieures à 1.73.5335.2
- Intel Chipset Device Software versions antérieures à 10.1.19444.8378
- Intel Code Base Investigator (CBI) versions antérieures à 1.1.0
- Intel Computing Improvement Program versions antérieures à 2.4.10654
- Intel Context Sensing Technology (CST) versions antérieures à 2.1.10300
- Intel Data Center GPU Max Series 1100 and 1550 toutes versions
- Intel Distribution pour GDB versions antérieures à 2024.0
- Intel Dynamic Load Balancer versions antérieures à 8.5.0
- Intel Dynamic Tuning Technology (DTT) sans les derniers correctifs de sécurité
- Intel Ethernet Adapter Complete Driver Pack versions antérieures à 28.3
- Intel Ethernet Adapters versions antérieures à 29.0.1
- Intel Ethernet Connections Boot Utility, Preboot Images et EFI Drivers versions antérieures à 28.3
- Intel Extreme Tuning Utility (XTU) versions antérieures à 7.14.0.15
- Intel Graphics Command Center Service embarqué dans le pilote Intel Graphics Windows DCH versions antérieures à 31.0.101.3790 et 31.0.101.2114
- Intel Graphics Performance Analyzers (GPA) Framework versions antérieures à 2023.4.
- Intel Graphics Performance Analyzers (GPA) versions antérieures à 2023.4.
- Intel HPC Toolkit versions antérieures à 2024.0
- Intel Inspector versions antérieures à 2024.0
- Intel Media SDK toutes versions
- Intel Neural Compressor versions antérieures à 2.5.0
- Intel oneAPI Base Toolkit versions antérieures à 2024.0
- Intel oneAPI HPC Toolkit versions antérieures à 2024.0.1.
- Intel oneVPL versions antérieures à 23.3.5
- Intel Performance Counter Monitor (PCM) versions antérieures à 202311
- Intel Power Gadget toutes versions
- Intel Processor Diagnostic Tool versions antérieures à 4.1.9.41
- Intel Processor Identification Utility versions antérieures à 7.1.6
- Intel Processor Identification Utility-Legacy versions antérieures à 6.10.34.1129
- Intel Quartus Prime Lite, Standard et Pro Design versions antérieures à 23.1
- Intel Stratix 10 FPGA et SoC FPGA versions antérieures à 2.9.0
- Intel Trace Analyzer and Collector versions antérieures à 2022.0.0 publiées en novembre 2023
- Intel Trust Domain Extensions (TDX) module versions antérieures à TDX_1.5.05.46.698
- Intel VTune Profiler versions antérieures à 2024.0
- Logiciels Intel PROSet/Wireless WiFi et Bluetooth versions antérieures à 23.20
- Micrologiciel Intel Bios Guard sans les derniers correctifs de sécurité
- Micrologiciel Intel Bios PPAM sans les derniers correctifs de sécurité
- Micrologiciel Intel Ethernet Controller I225 Manageability versions antérieures à NVM 1.87
- Micrologiciel UEFI pour Intel Server Board S2600BP toutes versions
- Micrologiciel UEFI pour Intel Server D50DNP sans les derniers correctifs de sécurité
- Micrologiciel UEFI pour Intel Server M50FCP sans les derniers correctifs de sécurité
- Micrologiciels pour Intel Agilex 7 FPGA et SoC FPGA versions antérieures à 23.3
- Micrologiciels pour Intel Stratix 10 FPGA et SoC FPGA versions antérieures à 23.3
- Pilote Intel Thunderbolt versions antérieures à 89
- Pilote Onboard vidéo versions antérieures à 1.14 pour Intel Server Boards basés sur des puces Intel 62X
- Processeurs Intel Core Ultra, plateforme Meteor Lake sans les derniers correctifs de sécurité
- Programme de désinstallation Intel Driver & Support Assistant (DSA) versions antérieures à 23.4.39.10
Intel a indiqué qu'aucun correctif de sécurité ne sera fourni pour Intel Power Gadget et pour le micrologiciel UEFI pour Intel Server Board S2600BP. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des produits affectés par les vulnérabilité CVE-2023-45733 et CVE-2024-21823 (cf. section Documentation).
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cul\u003e \u003cli\u003eBiblioth\u00e8que Libva iotg-lin-gfx-libva toutes verions\u003c/li\u003e \u003cli\u003eBiblioth\u00e8que Libva versions ant\u00e9rieures \u00e0 2.20.0\u003c/li\u003e \u003cli\u003eInstallateur Endurance Gaming Mode versions ant\u00e9rieures \u00e0 1.3.937.0\u003c/li\u003e \u003cli\u003eIntel Advisor versions ant\u00e9rieures \u00e0 2024.0\u003c/li\u003e \u003cli\u003eIntel Agilex 7 FPGA et SoC FPGA versions ant\u00e9rieures \u00e0 2.9.0\u003c/li\u003e \u003cli\u003eIntel Arc \u0026amp; Iris Xe Graphics versions ant\u00e9rieures \u00e0 31.0.101.5081\u003c/li\u003e \u003cli\u003eIntel Arc Control versions ant\u00e9rieures \u00e0 1.73.5335.2\u003c/li\u003e \u003cli\u003eIntel Chipset Device Software versions ant\u00e9rieures \u00e0 10.1.19444.8378\u003c/li\u003e \u003cli\u003eIntel Code Base Investigator (CBI) versions ant\u00e9rieures \u00e0 1.1.0\u003c/li\u003e \u003cli\u003eIntel Computing Improvement Program versions ant\u00e9rieures \u00e0 2.4.10654\u003c/li\u003e \u003cli\u003eIntel Context Sensing Technology (CST) versions ant\u00e9rieures \u00e0 2.1.10300\u003c/li\u003e \u003cli\u003eIntel Data Center GPU Max Series 1100 and 1550 toutes versions\u003c/li\u003e \u003cli\u003eIntel Distribution pour GDB versions ant\u00e9rieures \u00e0 2024.0\u003c/li\u003e \u003cli\u003eIntel Dynamic Load Balancer versions ant\u00e9rieures \u00e0 8.5.0\u003c/li\u003e \u003cli\u003eIntel Dynamic Tuning Technology (DTT) sans les derniers correctifs de s\u00e9curit\u00e9\u003c/li\u003e \u003cli\u003eIntel Ethernet Adapter Complete Driver Pack versions ant\u00e9rieures \u00e0 28.3\u003c/li\u003e \u003cli\u003eIntel Ethernet Adapters versions ant\u00e9rieures \u00e0 29.0.1\u003c/li\u003e \u003cli\u003eIntel Ethernet Connections Boot Utility, Preboot Images et EFI Drivers versions ant\u00e9rieures \u00e0 28.3\u003c/li\u003e \u003cli\u003eIntel Extreme Tuning Utility (XTU) versions ant\u00e9rieures \u00e0 7.14.0.15\u003c/li\u003e \u003cli\u003eIntel Graphics Command Center Service embarqu\u00e9 dans le pilote Intel Graphics Windows DCH versions ant\u00e9rieures \u00e0 31.0.101.3790 et 31.0.101.2114\u003c/li\u003e \u003cli\u003eIntel Graphics Performance Analyzers (GPA) Framework versions ant\u00e9rieures \u00e0 2023.4.\u003c/li\u003e \u003cli\u003eIntel Graphics Performance Analyzers (GPA) versions ant\u00e9rieures \u00e0 2023.4.\u003c/li\u003e \u003cli\u003eIntel HPC Toolkit versions ant\u00e9rieures \u00e0 2024.0\u003c/li\u003e \u003cli\u003eIntel Inspector versions ant\u00e9rieures \u00e0 2024.0\u003c/li\u003e \u003cli\u003eIntel Media SDK toutes versions\u003c/li\u003e \u003cli\u003eIntel Neural Compressor versions ant\u00e9rieures \u00e0 2.5.0\u003c/li\u003e \u003cli\u003eIntel oneAPI Base Toolkit versions ant\u00e9rieures \u00e0 2024.0\u003c/li\u003e \u003cli\u003eIntel oneAPI HPC Toolkit versions ant\u00e9rieures \u00e0 2024.0.1.\u003c/li\u003e \u003cli\u003eIntel oneVPL versions ant\u00e9rieures \u00e0 23.3.5\u003c/li\u003e \u003cli\u003eIntel Performance Counter Monitor (PCM) versions ant\u00e9rieures \u00e0 202311\u003c/li\u003e \u003cli\u003eIntel Power Gadget toutes versions\u003c/li\u003e \u003cli\u003eIntel Processor Diagnostic Tool versions ant\u00e9rieures \u00e0 4.1.9.41\u003c/li\u003e \u003cli\u003eIntel Processor Identification Utility versions ant\u00e9rieures \u00e0 7.1.6\u003c/li\u003e \u003cli\u003eIntel Processor Identification Utility-Legacy versions ant\u00e9rieures \u00e0 6.10.34.1129\u003c/li\u003e \u003cli\u003eIntel Quartus Prime Lite, Standard et Pro Design versions ant\u00e9rieures \u00e0 23.1\u003c/li\u003e \u003cli\u003eIntel Stratix 10 FPGA et SoC FPGA versions ant\u00e9rieures \u00e0 2.9.0\u003c/li\u003e \u003cli\u003eIntel Trace Analyzer and Collector versions ant\u00e9rieures \u00e0 2022.0.0 publi\u00e9es en novembre 2023\u003c/li\u003e \u003cli\u003eIntel Trust Domain Extensions (TDX) module versions ant\u00e9rieures \u00e0 TDX_1.5.05.46.698\u003c/li\u003e \u003cli\u003eIntel VTune Profiler versions ant\u00e9rieures \u00e0 2024.0\u003c/li\u003e \u003cli\u003eLogiciels Intel PROSet/Wireless WiFi et Bluetooth versions ant\u00e9rieures \u00e0 23.20\u003c/li\u003e \u003cli\u003eMicrologiciel Intel Bios Guard sans les derniers correctifs de s\u00e9curit\u00e9\u003c/li\u003e \u003cli\u003eMicrologiciel Intel Bios PPAM sans les derniers correctifs de s\u00e9curit\u00e9\u003c/li\u003e \u003cli\u003eMicrologiciel Intel Ethernet Controller I225 Manageability versions ant\u00e9rieures \u00e0 NVM 1.87\u003c/li\u003e \u003cli\u003eMicrologiciel UEFI pour Intel Server Board S2600BP toutes versions\u003c/li\u003e \u003cli\u003eMicrologiciel UEFI pour Intel Server D50DNP sans les derniers correctifs de s\u00e9curit\u00e9\u003c/li\u003e \u003cli\u003eMicrologiciel UEFI pour Intel Server M50FCP sans les derniers correctifs de s\u00e9curit\u00e9\u003c/li\u003e \u003cli\u003eMicrologiciels pour Intel Agilex 7 FPGA et SoC FPGA versions ant\u00e9rieures \u00e0 23.3\u003c/li\u003e \u003cli\u003eMicrologiciels pour Intel Stratix 10 FPGA et SoC FPGA versions ant\u00e9rieures \u00e0 23.3\u003c/li\u003e \u003cli\u003ePilote Intel Thunderbolt versions ant\u00e9rieures \u00e0 89\u003c/li\u003e \u003cli\u003ePilote Onboard vid\u00e9o versions ant\u00e9rieures \u00e0 1.14 pour Intel Server Boards bas\u00e9s sur des puces Intel 62X\u003c/li\u003e \u003cli\u003eProcesseurs Intel Core Ultra, plateforme Meteor Lake sans les derniers correctifs de s\u00e9curit\u00e9\u003c/li\u003e \u003cli\u003eProgramme de d\u00e9sinstallation Intel Driver \u0026amp; Support Assistant (DSA) versions ant\u00e9rieures \u00e0 23.4.39.10\u003c/li\u003e \u003c/ul\u003e \u003cp\u003eIntel a indiqu\u00e9 qu\u0027aucun correctif de s\u00e9curit\u00e9 ne sera fourni pour Intel Power Gadget et pour le micrologiciel UEFI pour Intel Server Board S2600BP. Se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des produits affect\u00e9s par les vuln\u00e9rabilit\u00e9 CVE-2023-45733 et CVE-2024-21823 (cf. section Documentation).\u003c/p\u003e ",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-22379",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22379"
},
{
"name": "CVE-2023-35192",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35192"
},
{
"name": "CVE-2024-24971",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24971"
},
{
"name": "CVE-2024-21864",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21864"
},
{
"name": "CVE-2023-46103",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46103"
},
{
"name": "CVE-2023-47859",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47859"
},
{
"name": "CVE-2024-21862",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21862"
},
{
"name": "CVE-2021-33146",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33146"
},
{
"name": "CVE-2023-48368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48368"
},
{
"name": "CVE-2023-46689",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46689"
},
{
"name": "CVE-2023-45845",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45845"
},
{
"name": "CVE-2024-21823",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21823"
},
{
"name": "CVE-2024-21818",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21818"
},
{
"name": "CVE-2021-33161",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33161"
},
{
"name": "CVE-2023-45846",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45846"
},
{
"name": "CVE-2024-21861",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21861"
},
{
"name": "CVE-2021-33157",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33157"
},
{
"name": "CVE-2023-42433",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42433"
},
{
"name": "CVE-2021-33162",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33162"
},
{
"name": "CVE-2021-33158",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33158"
},
{
"name": "CVE-2023-38581",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38581"
},
{
"name": "CVE-2022-37341",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37341"
},
{
"name": "CVE-2024-23487",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23487"
},
{
"name": "CVE-2023-41082",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-41082"
},
{
"name": "CVE-2023-43629",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43629"
},
{
"name": "CVE-2024-22382",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22382"
},
{
"name": "CVE-2023-43745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43745"
},
{
"name": "CVE-2021-33141",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33141"
},
{
"name": "CVE-2023-28383",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28383"
},
{
"name": "CVE-2023-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45736"
},
{
"name": "CVE-2024-21835",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21835"
},
{
"name": "CVE-2023-22662",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22662"
},
{
"name": "CVE-2024-21813",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21813"
},
{
"name": "CVE-2024-21831",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21831"
},
{
"name": "CVE-2023-41234",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-41234"
},
{
"name": "CVE-2023-45743",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45743"
},
{
"name": "CVE-2023-39433",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39433"
},
{
"name": "CVE-2023-43751",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43751"
},
{
"name": "CVE-2023-45315",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45315"
},
{
"name": "CVE-2023-42668",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42668"
},
{
"name": "CVE-2024-21828",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21828"
},
{
"name": "CVE-2023-47282",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47282"
},
{
"name": "CVE-2023-38417",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38417"
},
{
"name": "CVE-2023-40070",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40070"
},
{
"name": "CVE-2023-39929",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39929"
},
{
"name": "CVE-2024-22476",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22476"
},
{
"name": "CVE-2023-40155",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40155"
},
{
"name": "CVE-2024-21774",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21774"
},
{
"name": "CVE-2024-21772",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21772"
},
{
"name": "CVE-2024-21814",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21814"
},
{
"name": "CVE-2023-45320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45320"
},
{
"name": "CVE-2022-37410",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37410"
},
{
"name": "CVE-2023-29165",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29165"
},
{
"name": "CVE-2023-47169",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47169"
},
{
"name": "CVE-2023-27504",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27504"
},
{
"name": "CVE-2023-48727",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48727"
},
{
"name": "CVE-2021-33142",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33142"
},
{
"name": "CVE-2023-38420",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38420"
},
{
"name": "CVE-2024-22015",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22015"
},
{
"name": "CVE-2023-45221",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45221"
},
{
"name": "CVE-2023-47855",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47855"
},
{
"name": "CVE-2023-45217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45217"
},
{
"name": "CVE-2024-22390",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22390"
},
{
"name": "CVE-2024-21792",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21792"
},
{
"name": "CVE-2024-21837",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21837"
},
{
"name": "CVE-2023-38654",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38654"
},
{
"name": "CVE-2023-41092",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-41092"
},
{
"name": "CVE-2023-27305",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27305"
},
{
"name": "CVE-2023-49614",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-49614"
},
{
"name": "CVE-2024-22384",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22384"
},
{
"name": "CVE-2023-40536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40536"
},
{
"name": "CVE-2023-42773",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42773"
},
{
"name": "CVE-2023-24460",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24460"
},
{
"name": "CVE-2024-23980",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23980"
},
{
"name": "CVE-2023-47165",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47165"
},
{
"name": "CVE-2023-41961",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-41961"
},
{
"name": "CVE-2023-43487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43487"
},
{
"name": "CVE-2023-22656",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22656"
},
{
"name": "CVE-2024-24981",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24981"
},
{
"name": "CVE-2024-21777",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21777"
},
{
"name": "CVE-2023-45745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45745"
},
{
"name": "CVE-2024-21809",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21809"
},
{
"name": "CVE-2023-47210",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47210"
},
{
"name": "CVE-2023-28402",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28402"
},
{
"name": "CVE-2024-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21843"
},
{
"name": "CVE-2023-40071",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40071"
},
{
"name": "CVE-2023-25952",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25952"
},
{
"name": "CVE-2023-46691",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46691"
},
{
"name": "CVE-2023-45733",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45733"
},
{
"name": "CVE-2024-21841",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21841"
},
{
"name": "CVE-2023-43748",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43748"
},
{
"name": "CVE-2024-21788",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21788"
},
{
"name": "CVE-2024-22095",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22095"
},
{
"name": "CVE-2022-42879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42879"
},
{
"name": "CVE-2021-33145",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33145"
}
],
"initial_release_date": "2024-05-15T00:00:00",
"last_revision_date": "2024-05-15T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0397",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-05-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Intel.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\n\u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01012 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01012.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01035 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01035.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00983 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00983.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01036 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01037 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01034 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01034.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01067 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01067.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01042 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01042.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00984 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00984.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01032 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01032.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00756 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01020 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01020.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01021 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01054 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01054.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01051 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01066 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01066.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01056 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01056.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01039 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01007 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01007.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00814 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01047 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01047.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01052 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01055 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01031 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01031.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00996 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00996.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01013 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01013.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01059 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01059.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00916 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00916.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01080 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01080.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01053 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01053.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00935 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00962 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00962.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00965 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00965.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01041 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01041.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00937 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00937.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01084 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01084.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01043 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01043.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01109 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01069 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01069.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00831 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01050 du 14 mai 2024",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01050.html"
}
]
}
fkie_cve-2023-46103
Vulnerability from fkie_nvd
Published
2024-05-16 21:15
Modified
2024-11-21 08:27
Severity ?
Summary
Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access."
},
{
"lang": "es",
"value": "La secuencia de instrucciones del procesador genera un comportamiento inesperado en los procesadores Intel(R) Core(TM) Ultra que pueden permitir que un usuario autenticado habilite potencialmente la denegaci\u00f3n de servicio a trav\u00e9s del acceso local."
}
],
"id": "CVE-2023-46103",
"lastModified": "2024-11-21T08:27:54.237",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6,
"source": "secure@intel.com",
"type": "Secondary"
}
]
},
"published": "2024-05-16T21:15:59.137",
"references": [
{
"source": "secure@intel.com",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
],
"sourceIdentifier": "secure@intel.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1281"
}
],
"source": "secure@intel.com",
"type": "Secondary"
}
]
}
wid-sec-w-2024-1152
Vulnerability from csaf_certbund
Published
2024-05-14 22:00
Modified
2024-11-11 23:00
Summary
Intel Prozessoren: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Der Prozessor ist das zentrale Rechenwerk eines Computers.
Angriff
Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um Informationen offenzulegen, um einen Denial-of-Service-Zustand zu erzeugen, und um Privilegien zu erhöhen.
Betroffene Betriebssysteme
- BIOS/Firmware
- Hardware Appliance
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um Informationen offenzulegen, um einen Denial-of-Service-Zustand zu erzeugen, und um Privilegien zu erh\u00f6hen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- BIOS/Firmware\n- Hardware Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1152 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1152.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1152 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1152"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01051 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01052 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01069 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01069.html"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01054 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01054.html"
},
{
"category": "external",
"summary": "Lenovo Security Advisory LEN-158632 vom 2024-05-15",
"url": "https://support.lenovo.com/us/en/product_security/LEN-158632"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-113 vom 2024-05-14",
"url": "https://www.dell.com/support/kbdoc/de-de/000222726/dsa-2024-113"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-160 vom 2024-05-14",
"url": "https://www.dell.com/support/kbdoc/de-de/000224981/dsa-2024-160-security-update-for-dell-poweredge-server-for-intel-may-2024-security-advisories-2024-2-ipu"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1684-1 vom 2024-05-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018548.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1771-1 vom 2024-05-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018598.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6797-1 vom 2024-05-29",
"url": "https://ubuntu.com/security/notices/USN-6797-1"
},
{
"category": "external",
"summary": "HP Security Bulletin HPSBHF03942 vom 2024-06-07",
"url": "https://support.hp.com/us-en/document/ish_10737361-10737386-16/HPSBHF03942"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-022 vom 2024-07-03",
"url": "https://www.dell.com/support/kbdoc/de-de/000226633/dsa-2024-022-security-update-for-dell-networker-vproxy-multiple-component-vulnerabilities"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-F3692F8528 vom 2024-08-05",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-f3692f8528"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-96F3C3F3D3 vom 2024-08-05",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-96f3c3f3d3"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-348 vom 2024-08-06",
"url": "https://www.dell.com/support/kbdoc/de-de/000227573/dsa-2024-348-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-422 vom 2024-10-10",
"url": "https://www.dell.com/support/kbdoc/de-de/000234730/dsa-2024-422-security-update-for-dell-networker-vproxy-multiple-component-vulnerabilities"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:9401 vom 2024-11-12",
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"source_lang": "en-US",
"title": "Intel Prozessoren: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-11-11T23:00:00.000+00:00",
"generator": {
"date": "2024-11-12T12:17:05.875+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-1152",
"initial_release_date": "2024-05-14T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-05-14T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-05-20T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-05-23T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-05-30T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-06-10T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von HP aufgenommen"
},
{
"date": "2024-07-02T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-08-05T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2024-10-09T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-11-11T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Dell Computer",
"product": {
"name": "Dell Computer",
"product_id": "T006498",
"product_identification_helper": {
"cpe": "cpe:/o:dell:dell_computer:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Dell NetWorker",
"product": {
"name": "Dell NetWorker",
"product_id": "T024663",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:-"
}
}
},
{
"category": "product_version_range",
"name": "\u003c19.11",
"product": {
"name": "Dell NetWorker \u003c19.11",
"product_id": "T035785"
}
},
{
"category": "product_version",
"name": "19.11",
"product": {
"name": "Dell NetWorker 19.11",
"product_id": "T035785-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.11"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "EMC Avamar",
"product": {
"name": "EMC Avamar",
"product_id": "T014381",
"product_identification_helper": {
"cpe": "cpe:/a:emc:avamar:-"
}
}
}
],
"category": "vendor",
"name": "EMC"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"category": "product_name",
"name": "HP BIOS",
"product": {
"name": "HP BIOS",
"product_id": "T007117",
"product_identification_helper": {
"cpe": "cpe:/h:hp:bios:-"
}
}
}
],
"category": "vendor",
"name": "HP"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Meteor Lake \u003c0x7",
"product": {
"name": "Intel Prozessor Meteor Lake \u003c0x7",
"product_id": "T034647"
}
},
{
"category": "product_version",
"name": "Meteor Lake 0x7",
"product": {
"name": "Intel Prozessor Meteor Lake 0x7",
"product_id": "T034647-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:meteor_lake0x7"
}
}
},
{
"category": "product_version_range",
"name": "Alder Lake \u003c80",
"product": {
"name": "Intel Prozessor Alder Lake \u003c80",
"product_id": "T034648"
}
},
{
"category": "product_version",
"name": "Alder Lake 80",
"product": {
"name": "Intel Prozessor Alder Lake 80",
"product_id": "T034648-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:alder_lake80"
}
}
},
{
"category": "product_version_range",
"name": "Alder Lake \u003c07",
"product": {
"name": "Intel Prozessor Alder Lake \u003c07",
"product_id": "T034649"
}
},
{
"category": "product_version",
"name": "Alder Lake 07",
"product": {
"name": "Intel Prozessor Alder Lake 07",
"product_id": "T034649-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:alder_lake07"
}
}
},
{
"category": "product_version_range",
"name": "Alder Lake \u003c11",
"product": {
"name": "Intel Prozessor Alder Lake \u003c11",
"product_id": "T034650"
}
},
{
"category": "product_version",
"name": "Alder Lake 11",
"product": {
"name": "Intel Prozessor Alder Lake 11",
"product_id": "T034650-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:alder_lake11"
}
}
},
{
"category": "product_version_range",
"name": "Raptor Lake \u003c01",
"product": {
"name": "Intel Prozessor Raptor Lake \u003c01",
"product_id": "T034651"
}
},
{
"category": "product_version",
"name": "Raptor Lake 01",
"product": {
"name": "Intel Prozessor Raptor Lake 01",
"product_id": "T034651-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:raptor_lake01"
}
}
},
{
"category": "product_version_range",
"name": "Arizona Beach \u003c40",
"product": {
"name": "Intel Prozessor Arizona Beach \u003c40",
"product_id": "T034652"
}
},
{
"category": "product_version",
"name": "Arizona Beach 40",
"product": {
"name": "Intel Prozessor Arizona Beach 40",
"product_id": "T034652-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:arizona_beach40"
}
}
},
{
"category": "product_version_range",
"name": "Meteor Lake \u003c0x18",
"product": {
"name": "Intel Prozessor Meteor Lake \u003c0x18",
"product_id": "T034653"
}
},
{
"category": "product_version",
"name": "Meteor Lake 0x18",
"product": {
"name": "Intel Prozessor Meteor Lake 0x18",
"product_id": "T034653-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:meteor_lake0x18"
}
}
},
{
"category": "product_version_range",
"name": "Diagnostic Tool \u003c4.1.9.41",
"product": {
"name": "Intel Prozessor Diagnostic Tool \u003c4.1.9.41",
"product_id": "T034655"
}
},
{
"category": "product_version",
"name": "Diagnostic Tool 4.1.9.41",
"product": {
"name": "Intel Prozessor Diagnostic Tool 4.1.9.41",
"product_id": "T034655-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:diagnostic_tool4.1.9.41"
}
}
},
{
"category": "product_version_range",
"name": "Identification Utility \u003c7.16",
"product": {
"name": "Intel Prozessor Identification Utility \u003c7.16",
"product_id": "T034656"
}
},
{
"category": "product_version",
"name": "Identification Utility 7.16",
"product": {
"name": "Intel Prozessor Identification Utility 7.16",
"product_id": "T034656-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:identification_utility7.16"
}
}
},
{
"category": "product_version_range",
"name": "Identification Utility-Legacy \u003c6.10.34.1129",
"product": {
"name": "Intel Prozessor Identification Utility-Legacy \u003c6.10.34.1129",
"product_id": "T034657"
}
},
{
"category": "product_version",
"name": "Identification Utility-Legacy 6.10.34.1129",
"product": {
"name": "Intel Prozessor Identification Utility-Legacy 6.10.34.1129",
"product_id": "T034657-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:identification_utility-legacy6.10.34.1129"
}
}
}
],
"category": "product_name",
"name": "Prozessor"
}
],
"category": "vendor",
"name": "Intel"
},
{
"branches": [
{
"category": "product_name",
"name": "Lenovo Computer",
"product": {
"name": "Lenovo Computer",
"product_id": "T032264",
"product_identification_helper": {
"cpe": "cpe:/h:lenovo:computer:-"
}
}
}
],
"category": "vendor",
"name": "Lenovo"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45733",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle in Intel Prozessoren aufgrund einem Race Condition in der Hardwarelogik. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2023-45733"
},
{
"cve": "CVE-2024-21774",
"notes": [
{
"category": "description",
"text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese Fehler bestehen im Diagnostic Tool und im Identification Utility Software aufgrund eines unkontrollierten Suchpfads. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Privilegien zu erh\u00f6hen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2024-21774"
},
{
"cve": "CVE-2024-21831",
"notes": [
{
"category": "description",
"text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese Fehler bestehen im Diagnostic Tool und im Identification Utility Software aufgrund eines unkontrollierten Suchpfads. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Privilegien zu erh\u00f6hen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2024-21831"
},
{
"cve": "CVE-2023-46103",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle in Intel Prozessoren. Dieser Fehler liegt im Core Ultra-Prozessor aufgrund einer Sequenz von Prozessoranweisungen, die zu unerwartetem Verhalten f\u00fchrt. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2023-46103"
}
]
}
wid-sec-w-2025-0225
Vulnerability from csaf_certbund
Published
2025-01-30 23:00
Modified
2025-08-04 22:00
Summary
Dell PowerProtect Data Domain: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Dell PowerProtect Data Domain Appliances sind speziell für Backup und Daten-Deduplizierung ausgelegte Systeme.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um erhöhte Rechte zu erlangen, einen Denial-of-Service-Zustand herbeizuführen und einen nicht näher spezifizierten Angriff durchzuführen.
Betroffene Betriebssysteme
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Dell PowerProtect Data Domain Appliances sind speziell f\u00fcr Backup und Daten-Deduplizierung ausgelegte Systeme.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um erh\u00f6hte Rechte zu erlangen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0225 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0225.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0225 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0225"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-022 vom 2025-01-30",
"url": "https://www.dell.com/support/kbdoc/de-de/000279157/dsa-2025-022-security-update-for-dell-powerprotect-dd-multiple-vulnerabilities"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2804 vom 2025-04-02",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2804.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7429-2 vom 2025-04-09",
"url": "https://ubuntu.com/security/notices/USN-7429-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7429-1 vom 2025-04-09",
"url": "https://ubuntu.com/security/notices/USN-7429-1"
},
{
"category": "external",
"summary": "Security Update for Dell PowerProtect Data Domain",
"url": "https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities"
}
],
"source_lang": "en-US",
"title": "Dell PowerProtect Data Domain: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-08-04T22:00:00.000+00:00",
"generator": {
"date": "2025-08-05T07:21:04.568+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-0225",
"initial_release_date": "2025-01-30T23:00:00.000+00:00",
"revision_history": [
{
"date": "2025-01-30T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-04-01T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2025-04-09T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-08-04T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Dell aufgenommen"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c8.3.0.0",
"product": {
"name": "Dell PowerProtect Data Domain \u003c8.3.0.0",
"product_id": "T040718"
}
},
{
"category": "product_version",
"name": "8.3.0.0",
"product": {
"name": "Dell PowerProtect Data Domain 8.3.0.0",
"product_id": "T040718-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:8.3.0.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.13.1.20",
"product": {
"name": "Dell PowerProtect Data Domain \u003c7.13.1.20",
"product_id": "T040719"
}
},
{
"category": "product_version",
"name": "7.13.1.20",
"product": {
"name": "Dell PowerProtect Data Domain 7.13.1.20",
"product_id": "T040719-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:7.13.1.20"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.10.1.50",
"product": {
"name": "Dell PowerProtect Data Domain \u003c7.10.1.50",
"product_id": "T040721"
}
},
{
"category": "product_version",
"name": "7.10.1.50",
"product": {
"name": "Dell PowerProtect Data Domain 7.10.1.50",
"product_id": "T040721-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:7.10.1.50"
}
}
},
{
"category": "product_name",
"name": "Dell PowerProtect Data Domain",
"product": {
"name": "Dell PowerProtect Data Domain",
"product_id": "T045852",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:-"
}
}
}
],
"category": "product_name",
"name": "PowerProtect Data Domain"
},
{
"category": "product_name",
"name": "Dell PowerProtect Data Domain Management Center",
"product": {
"name": "Dell PowerProtect Data Domain Management Center",
"product_id": "T045853",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain_management_center:-"
}
}
},
{
"category": "product_name",
"name": "Dell PowerProtect Data Domain OS",
"product": {
"name": "Dell PowerProtect Data Domain OS",
"product_id": "T045854",
"product_identification_helper": {
"cpe": "cpe:/o:dell:powerprotect_data_domain_os:-"
}
}
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4235",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2013-4235"
},
{
"cve": "CVE-2015-8100",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2015-8100"
},
{
"cve": "CVE-2017-9271",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2017-9271"
},
{
"cve": "CVE-2018-6798",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2018-6798"
},
{
"cve": "CVE-2018-6913",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2018-6913"
},
{
"cve": "CVE-2019-20633",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2019-20633"
},
{
"cve": "CVE-2019-20892",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2019-20892"
},
{
"cve": "CVE-2020-12762",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2020-12762"
},
{
"cve": "CVE-2020-15861",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2020-15861"
},
{
"cve": "CVE-2020-15862",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2020-15862"
},
{
"cve": "CVE-2021-3521",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-3521"
},
{
"cve": "CVE-2021-37750",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-37750"
},
{
"cve": "CVE-2021-46933",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-46933"
},
{
"cve": "CVE-2021-46955",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-46955"
},
{
"cve": "CVE-2021-47074",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47074"
},
{
"cve": "CVE-2021-47113",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47113"
},
{
"cve": "CVE-2021-47131",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47131"
},
{
"cve": "CVE-2021-47162",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47162"
},
{
"cve": "CVE-2021-47171",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47171"
},
{
"cve": "CVE-2021-47188",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47188"
},
{
"cve": "CVE-2021-47206",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47206"
},
{
"cve": "CVE-2021-47220",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47220"
},
{
"cve": "CVE-2021-47229",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47229"
},
{
"cve": "CVE-2021-47231",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47231"
},
{
"cve": "CVE-2021-47235",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2021-47235"
},
{
"cve": "CVE-2022-2601",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2022-2601"
},
{
"cve": "CVE-2022-3775",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2022-3775"
},
{
"cve": "CVE-2022-44792",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2022-44792"
},
{
"cve": "CVE-2022-44793",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2022-44793"
},
{
"cve": "CVE-2022-48566",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2022-48566"
},
{
"cve": "CVE-2023-27043",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-27043"
},
{
"cve": "CVE-2023-28074",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-28074"
},
{
"cve": "CVE-2023-3164",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-3164"
},
{
"cve": "CVE-2023-36632",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-36632"
},
{
"cve": "CVE-2023-4421",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-4421"
},
{
"cve": "CVE-2023-44487",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-44487"
},
{
"cve": "CVE-2023-45288",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-45288"
},
{
"cve": "CVE-2023-45733",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-45733"
},
{
"cve": "CVE-2023-45745",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-45745"
},
{
"cve": "CVE-2023-45918",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-45918"
},
{
"cve": "CVE-2023-46103",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-46103"
},
{
"cve": "CVE-2023-4692",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-4692"
},
{
"cve": "CVE-2023-47233",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-47233"
},
{
"cve": "CVE-2023-47855",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-47855"
},
{
"cve": "CVE-2023-49083",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-49083"
},
{
"cve": "CVE-2023-50782",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-50782"
},
{
"cve": "CVE-2023-52425",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52425"
},
{
"cve": "CVE-2023-52426",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52426"
},
{
"cve": "CVE-2023-52428",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52428"
},
{
"cve": "CVE-2023-52527",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52527"
},
{
"cve": "CVE-2023-52586",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52586"
},
{
"cve": "CVE-2023-52591",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52591"
},
{
"cve": "CVE-2023-52646",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52646"
},
{
"cve": "CVE-2023-52653",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52653"
},
{
"cve": "CVE-2023-52655",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52655"
},
{
"cve": "CVE-2023-52664",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52664"
},
{
"cve": "CVE-2023-52685",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52685"
},
{
"cve": "CVE-2023-52686",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52686"
},
{
"cve": "CVE-2023-52691",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52691"
},
{
"cve": "CVE-2023-52696",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52696"
},
{
"cve": "CVE-2023-52698",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52698"
},
{
"cve": "CVE-2023-52703",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52703"
},
{
"cve": "CVE-2023-52730",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52730"
},
{
"cve": "CVE-2023-52732",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52732"
},
{
"cve": "CVE-2023-52741",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52741"
},
{
"cve": "CVE-2023-52742",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52742"
},
{
"cve": "CVE-2023-52747",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52747"
},
{
"cve": "CVE-2023-52759",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52759"
},
{
"cve": "CVE-2023-52774",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52774"
},
{
"cve": "CVE-2023-52781",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52781"
},
{
"cve": "CVE-2023-52796",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52796"
},
{
"cve": "CVE-2023-52803",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52803"
},
{
"cve": "CVE-2023-52821",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52821"
},
{
"cve": "CVE-2023-52864",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52864"
},
{
"cve": "CVE-2023-52865",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52865"
},
{
"cve": "CVE-2023-52867",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52867"
},
{
"cve": "CVE-2023-52875",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52875"
},
{
"cve": "CVE-2023-52880",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-52880"
},
{
"cve": "CVE-2023-5388",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-5388"
},
{
"cve": "CVE-2023-5752",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-5752"
},
{
"cve": "CVE-2023-5992",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-5992"
},
{
"cve": "CVE-2023-6597",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2023-6597"
},
{
"cve": "CVE-2024-0397",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-0397"
},
{
"cve": "CVE-2024-0450",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-0450"
},
{
"cve": "CVE-2024-0639",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-0639"
},
{
"cve": "CVE-2024-0727",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-0727"
},
{
"cve": "CVE-2024-1737",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-1737"
},
{
"cve": "CVE-2024-1975",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-1975"
},
{
"cve": "CVE-2024-2004",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-2004"
},
{
"cve": "CVE-2024-20696",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-20696"
},
{
"cve": "CVE-2024-22195",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-22195"
},
{
"cve": "CVE-2024-2398",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-2398"
},
{
"cve": "CVE-2024-24577",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-24577"
},
{
"cve": "CVE-2024-24790",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-24790"
},
{
"cve": "CVE-2024-2511",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-2511"
},
{
"cve": "CVE-2024-25710",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-25710"
},
{
"cve": "CVE-2024-26130",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26130"
},
{
"cve": "CVE-2024-26458",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26458"
},
{
"cve": "CVE-2024-26461",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26461"
},
{
"cve": "CVE-2024-26625",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26625"
},
{
"cve": "CVE-2024-26739",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26739"
},
{
"cve": "CVE-2024-26752",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26752"
},
{
"cve": "CVE-2024-26775",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26775"
},
{
"cve": "CVE-2024-26791",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26791"
},
{
"cve": "CVE-2024-26828",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26828"
},
{
"cve": "CVE-2024-26846",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26846"
},
{
"cve": "CVE-2024-26874",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26874"
},
{
"cve": "CVE-2024-26876",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26876"
},
{
"cve": "CVE-2024-26900",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26900"
},
{
"cve": "CVE-2024-26915",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26915"
},
{
"cve": "CVE-2024-26920",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26920"
},
{
"cve": "CVE-2024-26921",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26921"
},
{
"cve": "CVE-2024-26929",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26929"
},
{
"cve": "CVE-2024-26930",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26930"
},
{
"cve": "CVE-2024-26931",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26931"
},
{
"cve": "CVE-2024-26934",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26934"
},
{
"cve": "CVE-2024-26957",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26957"
},
{
"cve": "CVE-2024-26958",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26958"
},
{
"cve": "CVE-2024-26984",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26984"
},
{
"cve": "CVE-2024-26996",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-26996"
},
{
"cve": "CVE-2024-27008",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27008"
},
{
"cve": "CVE-2024-27054",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27054"
},
{
"cve": "CVE-2024-27059",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27059"
},
{
"cve": "CVE-2024-27062",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27062"
},
{
"cve": "CVE-2024-27388",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27388"
},
{
"cve": "CVE-2024-27396",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27396"
},
{
"cve": "CVE-2024-27398",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27398"
},
{
"cve": "CVE-2024-27401",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27401"
},
{
"cve": "CVE-2024-27419",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27419"
},
{
"cve": "CVE-2024-27436",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-27436"
},
{
"cve": "CVE-2024-28085",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-28085"
},
{
"cve": "CVE-2024-28182",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-28182"
},
{
"cve": "CVE-2024-2961",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-2961"
},
{
"cve": "CVE-2024-32487",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-32487"
},
{
"cve": "CVE-2024-33599",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-33599"
},
{
"cve": "CVE-2024-33600",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-33600"
},
{
"cve": "CVE-2024-33601",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-33601"
},
{
"cve": "CVE-2024-33602",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-33602"
},
{
"cve": "CVE-2024-33871",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-33871"
},
{
"cve": "CVE-2024-34062",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-34062"
},
{
"cve": "CVE-2024-34064",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-34064"
},
{
"cve": "CVE-2024-34459",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-34459"
},
{
"cve": "CVE-2024-35195",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35195"
},
{
"cve": "CVE-2024-35235",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35235"
},
{
"cve": "CVE-2024-35789",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35789"
},
{
"cve": "CVE-2024-35791",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35791"
},
{
"cve": "CVE-2024-35809",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35809"
},
{
"cve": "CVE-2024-35811",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35811"
},
{
"cve": "CVE-2024-35830",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35830"
},
{
"cve": "CVE-2024-35849",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35849"
},
{
"cve": "CVE-2024-35877",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35877"
},
{
"cve": "CVE-2024-35878",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35878"
},
{
"cve": "CVE-2024-35887",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35887"
},
{
"cve": "CVE-2024-35895",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35895"
},
{
"cve": "CVE-2024-35914",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35914"
},
{
"cve": "CVE-2024-35932",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35932"
},
{
"cve": "CVE-2024-35935",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35935"
},
{
"cve": "CVE-2024-35936",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35936"
},
{
"cve": "CVE-2024-35944",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35944"
},
{
"cve": "CVE-2024-35955",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35955"
},
{
"cve": "CVE-2024-35969",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35969"
},
{
"cve": "CVE-2024-35982",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-35982"
},
{
"cve": "CVE-2024-36015",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-36015"
},
{
"cve": "CVE-2024-36029",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-36029"
},
{
"cve": "CVE-2024-3651",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-3651"
},
{
"cve": "CVE-2024-36954",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-36954"
},
{
"cve": "CVE-2024-37370",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-37370"
},
{
"cve": "CVE-2024-37371",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-37371"
},
{
"cve": "CVE-2024-37891",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-37891"
},
{
"cve": "CVE-2024-38428",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-38428"
},
{
"cve": "CVE-2024-39689",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-39689"
},
{
"cve": "CVE-2024-4032",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-4032"
},
{
"cve": "CVE-2024-41110",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-41110"
},
{
"cve": "CVE-2024-4317",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-4317"
},
{
"cve": "CVE-2024-4741",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-4741"
},
{
"cve": "CVE-2024-5206",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-5206"
},
{
"cve": "CVE-2024-5535",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-5535"
},
{
"cve": "CVE-2024-6232",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-6232"
},
{
"cve": "CVE-2024-6345",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-6345"
},
{
"cve": "CVE-2024-6655",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-6655"
},
{
"cve": "CVE-2024-7264",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-7264"
},
{
"cve": "CVE-2024-7592",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-7592"
},
{
"cve": "CVE-2024-53295",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-53295"
},
{
"cve": "CVE-2024-51534",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-51534"
},
{
"cve": "CVE-2024-53296",
"product_status": {
"known_affected": [
"T045853",
"T040719",
"T045852",
"T040718",
"T045854",
"T000126",
"T040721",
"398363"
]
},
"release_date": "2025-01-30T23:00:00.000+00:00",
"title": "CVE-2024-53296"
}
]
}
WID-SEC-W-2024-1152
Vulnerability from csaf_certbund
Published
2024-05-14 22:00
Modified
2024-11-11 23:00
Summary
Intel Prozessoren: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Der Prozessor ist das zentrale Rechenwerk eines Computers.
Angriff
Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um Informationen offenzulegen, um einen Denial-of-Service-Zustand zu erzeugen, und um Privilegien zu erhöhen.
Betroffene Betriebssysteme
- BIOS/Firmware
- Hardware Appliance
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Prozessor ist das zentrale Rechenwerk eines Computers.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um Informationen offenzulegen, um einen Denial-of-Service-Zustand zu erzeugen, und um Privilegien zu erh\u00f6hen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- BIOS/Firmware\n- Hardware Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1152 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1152.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1152 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1152"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01051 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01052 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01069 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01069.html"
},
{
"category": "external",
"summary": "Intel Security Advisory INTEL-SA-01054 vom 2024-05-14",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01054.html"
},
{
"category": "external",
"summary": "Lenovo Security Advisory LEN-158632 vom 2024-05-15",
"url": "https://support.lenovo.com/us/en/product_security/LEN-158632"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-113 vom 2024-05-14",
"url": "https://www.dell.com/support/kbdoc/de-de/000222726/dsa-2024-113"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-160 vom 2024-05-14",
"url": "https://www.dell.com/support/kbdoc/de-de/000224981/dsa-2024-160-security-update-for-dell-poweredge-server-for-intel-may-2024-security-advisories-2024-2-ipu"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1684-1 vom 2024-05-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018548.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1771-1 vom 2024-05-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018598.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6797-1 vom 2024-05-29",
"url": "https://ubuntu.com/security/notices/USN-6797-1"
},
{
"category": "external",
"summary": "HP Security Bulletin HPSBHF03942 vom 2024-06-07",
"url": "https://support.hp.com/us-en/document/ish_10737361-10737386-16/HPSBHF03942"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-022 vom 2024-07-03",
"url": "https://www.dell.com/support/kbdoc/de-de/000226633/dsa-2024-022-security-update-for-dell-networker-vproxy-multiple-component-vulnerabilities"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-F3692F8528 vom 2024-08-05",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-f3692f8528"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-96F3C3F3D3 vom 2024-08-05",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-96f3c3f3d3"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-348 vom 2024-08-06",
"url": "https://www.dell.com/support/kbdoc/de-de/000227573/dsa-2024-348-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-422 vom 2024-10-10",
"url": "https://www.dell.com/support/kbdoc/de-de/000234730/dsa-2024-422-security-update-for-dell-networker-vproxy-multiple-component-vulnerabilities"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:9401 vom 2024-11-12",
"url": "https://access.redhat.com/errata/RHSA-2024:9401"
}
],
"source_lang": "en-US",
"title": "Intel Prozessoren: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-11-11T23:00:00.000+00:00",
"generator": {
"date": "2024-11-12T12:17:05.875+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-1152",
"initial_release_date": "2024-05-14T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-05-14T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-05-20T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-05-23T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-05-30T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-06-10T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von HP aufgenommen"
},
{
"date": "2024-07-02T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-08-05T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2024-10-09T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-11-11T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Dell Computer",
"product": {
"name": "Dell Computer",
"product_id": "T006498",
"product_identification_helper": {
"cpe": "cpe:/o:dell:dell_computer:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Dell NetWorker",
"product": {
"name": "Dell NetWorker",
"product_id": "T024663",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:-"
}
}
},
{
"category": "product_version_range",
"name": "\u003c19.11",
"product": {
"name": "Dell NetWorker \u003c19.11",
"product_id": "T035785"
}
},
{
"category": "product_version",
"name": "19.11",
"product": {
"name": "Dell NetWorker 19.11",
"product_id": "T035785-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.11"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "EMC Avamar",
"product": {
"name": "EMC Avamar",
"product_id": "T014381",
"product_identification_helper": {
"cpe": "cpe:/a:emc:avamar:-"
}
}
}
],
"category": "vendor",
"name": "EMC"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"category": "product_name",
"name": "HP BIOS",
"product": {
"name": "HP BIOS",
"product_id": "T007117",
"product_identification_helper": {
"cpe": "cpe:/h:hp:bios:-"
}
}
}
],
"category": "vendor",
"name": "HP"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Meteor Lake \u003c0x7",
"product": {
"name": "Intel Prozessor Meteor Lake \u003c0x7",
"product_id": "T034647"
}
},
{
"category": "product_version",
"name": "Meteor Lake 0x7",
"product": {
"name": "Intel Prozessor Meteor Lake 0x7",
"product_id": "T034647-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:meteor_lake0x7"
}
}
},
{
"category": "product_version_range",
"name": "Alder Lake \u003c80",
"product": {
"name": "Intel Prozessor Alder Lake \u003c80",
"product_id": "T034648"
}
},
{
"category": "product_version",
"name": "Alder Lake 80",
"product": {
"name": "Intel Prozessor Alder Lake 80",
"product_id": "T034648-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:alder_lake80"
}
}
},
{
"category": "product_version_range",
"name": "Alder Lake \u003c07",
"product": {
"name": "Intel Prozessor Alder Lake \u003c07",
"product_id": "T034649"
}
},
{
"category": "product_version",
"name": "Alder Lake 07",
"product": {
"name": "Intel Prozessor Alder Lake 07",
"product_id": "T034649-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:alder_lake07"
}
}
},
{
"category": "product_version_range",
"name": "Alder Lake \u003c11",
"product": {
"name": "Intel Prozessor Alder Lake \u003c11",
"product_id": "T034650"
}
},
{
"category": "product_version",
"name": "Alder Lake 11",
"product": {
"name": "Intel Prozessor Alder Lake 11",
"product_id": "T034650-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:alder_lake11"
}
}
},
{
"category": "product_version_range",
"name": "Raptor Lake \u003c01",
"product": {
"name": "Intel Prozessor Raptor Lake \u003c01",
"product_id": "T034651"
}
},
{
"category": "product_version",
"name": "Raptor Lake 01",
"product": {
"name": "Intel Prozessor Raptor Lake 01",
"product_id": "T034651-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:raptor_lake01"
}
}
},
{
"category": "product_version_range",
"name": "Arizona Beach \u003c40",
"product": {
"name": "Intel Prozessor Arizona Beach \u003c40",
"product_id": "T034652"
}
},
{
"category": "product_version",
"name": "Arizona Beach 40",
"product": {
"name": "Intel Prozessor Arizona Beach 40",
"product_id": "T034652-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:arizona_beach40"
}
}
},
{
"category": "product_version_range",
"name": "Meteor Lake \u003c0x18",
"product": {
"name": "Intel Prozessor Meteor Lake \u003c0x18",
"product_id": "T034653"
}
},
{
"category": "product_version",
"name": "Meteor Lake 0x18",
"product": {
"name": "Intel Prozessor Meteor Lake 0x18",
"product_id": "T034653-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:meteor_lake0x18"
}
}
},
{
"category": "product_version_range",
"name": "Diagnostic Tool \u003c4.1.9.41",
"product": {
"name": "Intel Prozessor Diagnostic Tool \u003c4.1.9.41",
"product_id": "T034655"
}
},
{
"category": "product_version",
"name": "Diagnostic Tool 4.1.9.41",
"product": {
"name": "Intel Prozessor Diagnostic Tool 4.1.9.41",
"product_id": "T034655-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:diagnostic_tool4.1.9.41"
}
}
},
{
"category": "product_version_range",
"name": "Identification Utility \u003c7.16",
"product": {
"name": "Intel Prozessor Identification Utility \u003c7.16",
"product_id": "T034656"
}
},
{
"category": "product_version",
"name": "Identification Utility 7.16",
"product": {
"name": "Intel Prozessor Identification Utility 7.16",
"product_id": "T034656-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:identification_utility7.16"
}
}
},
{
"category": "product_version_range",
"name": "Identification Utility-Legacy \u003c6.10.34.1129",
"product": {
"name": "Intel Prozessor Identification Utility-Legacy \u003c6.10.34.1129",
"product_id": "T034657"
}
},
{
"category": "product_version",
"name": "Identification Utility-Legacy 6.10.34.1129",
"product": {
"name": "Intel Prozessor Identification Utility-Legacy 6.10.34.1129",
"product_id": "T034657-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:intel:intel_prozessor:identification_utility-legacy6.10.34.1129"
}
}
}
],
"category": "product_name",
"name": "Prozessor"
}
],
"category": "vendor",
"name": "Intel"
},
{
"branches": [
{
"category": "product_name",
"name": "Lenovo Computer",
"product": {
"name": "Lenovo Computer",
"product_id": "T032264",
"product_identification_helper": {
"cpe": "cpe:/h:lenovo:computer:-"
}
}
}
],
"category": "vendor",
"name": "Lenovo"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45733",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle in Intel Prozessoren aufgrund einem Race Condition in der Hardwarelogik. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2023-45733"
},
{
"cve": "CVE-2024-21774",
"notes": [
{
"category": "description",
"text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese Fehler bestehen im Diagnostic Tool und im Identification Utility Software aufgrund eines unkontrollierten Suchpfads. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Privilegien zu erh\u00f6hen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2024-21774"
},
{
"cve": "CVE-2024-21831",
"notes": [
{
"category": "description",
"text": "In Intel Prozessoren existieren mehrere Schwachstellen. Diese Fehler bestehen im Diagnostic Tool und im Identification Utility Software aufgrund eines unkontrollierten Suchpfads. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Privilegien zu erh\u00f6hen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2024-21831"
},
{
"cve": "CVE-2023-46103",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle in Intel Prozessoren. Dieser Fehler liegt im Core Ultra-Prozessor aufgrund einer Sequenz von Prozessoranweisungen, die zu unerwartetem Verhalten f\u00fchrt. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen."
}
],
"product_status": {
"known_affected": [
"T006498",
"T034657",
"T034656",
"T034655",
"67646",
"T034649",
"T007117",
"T034648",
"T034647",
"T034653",
"T035785",
"T034652",
"74185",
"T034651",
"T032264",
"T034650",
"T014381",
"T002207",
"T000126",
"T024663"
]
},
"release_date": "2024-05-14T22:00:00.000+00:00",
"title": "CVE-2023-46103"
}
]
}
opensuse-su-2024:13974-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
ucode-intel-20240514-1.1 on GA media
Notes
Title of the patch
ucode-intel-20240514-1.1 on GA media
Description of the patch
These are all security issues fixed in the ucode-intel-20240514-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-13974
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ucode-intel-20240514-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ucode-intel-20240514-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-13974",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13974-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45733 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45745 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-46103 page",
"url": "https://www.suse.com/security/cve/CVE-2023-46103/"
}
],
"title": "ucode-intel-20240514-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:13974-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-1.1.aarch64",
"product": {
"name": "ucode-intel-20240514-1.1.aarch64",
"product_id": "ucode-intel-20240514-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-1.1.ppc64le",
"product": {
"name": "ucode-intel-20240514-1.1.ppc64le",
"product_id": "ucode-intel-20240514-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-1.1.s390x",
"product": {
"name": "ucode-intel-20240514-1.1.s390x",
"product_id": "ucode-intel-20240514-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-1.1.x86_64",
"product": {
"name": "ucode-intel-20240514-1.1.x86_64",
"product_id": "ucode-intel-20240514-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64"
},
"product_reference": "ucode-intel-20240514-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le"
},
"product_reference": "ucode-intel-20240514-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x"
},
"product_reference": "ucode-intel-20240514-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
},
"product_reference": "ucode-intel-20240514-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45733"
}
],
"notes": [
{
"category": "general",
"text": "Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45733",
"url": "https://www.suse.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45733",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-45733"
},
{
"cve": "CVE-2023-45745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45745"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45745",
"url": "https://www.suse.com/security/cve/CVE-2023-45745"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45745",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.9,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-45745"
},
{
"cve": "CVE-2023-46103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-46103"
}
],
"notes": [
{
"category": "general",
"text": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-46103",
"url": "https://www.suse.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-46103",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.aarch64",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.ppc64le",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.s390x",
"openSUSE Tumbleweed:ucode-intel-20240514-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-46103"
}
]
}
suse-su-2024:1771-1
Vulnerability from csaf_suse
Published
2024-05-23 19:06
Modified
2024-05-23 19:06
Summary
Security update for ucode-intel
Notes
Title of the patch
Security update for ucode-intel
Description of the patch
This update for ucode-intel fixes the following issues:
Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)
- CVE-2023-45733: Fixed a potential security vulnerability in some
Intel® Processors that may have allowed information disclosure.
- CVE-2023-46103: Fixed a potential security vulnerability in Intel®
Core™ Ultra Processors that may have allowed denial of service.
- CVE-2023-45745,CVE-2023-47855: Fixed a potential security
vulnerabilities in some Intel® Trust Domain Extensions (TDX) module
software that may have allowed escalation of privilege.
Patchnames
SUSE-2024-1771,SUSE-SLE-Micro-5.3-2024-1771,SUSE-SLE-Micro-5.4-2024-1771,SUSE-SLE-Micro-5.5-2024-1771,SUSE-SLE-Module-Basesystem-15-SP5-2024-1771,SUSE-SLE-Module-Basesystem-15-SP6-2024-1771,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1771,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1771,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1771,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1771,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1771,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1771,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1771,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1771,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1771,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1771,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1771,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1771,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1771,SUSE-SUSE-MicroOS-5.1-2024-1771,SUSE-SUSE-MicroOS-5.2-2024-1771,SUSE-Storage-7.1-2024-1771,openSUSE-Leap-Micro-5.3-2024-1771,openSUSE-Leap-Micro-5.4-2024-1771,openSUSE-SLE-15.5-2024-1771,openSUSE-SLE-15.6-2024-1771
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ucode-intel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ucode-intel fixes the following issues:\n\nIntel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n\n- CVE-2023-45733: Fixed a potential security vulnerability in some\n Intel\u00ae Processors that may have allowed information disclosure.\n- CVE-2023-46103: Fixed a potential security vulnerability in Intel\u00ae\n Core\u2122 Ultra Processors that may have allowed denial of service.\n- CVE-2023-45745,CVE-2023-47855: Fixed a potential security\n vulnerabilities in some Intel\u00ae Trust Domain Extensions (TDX) module\n software that may have allowed escalation of privilege.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-1771,SUSE-SLE-Micro-5.3-2024-1771,SUSE-SLE-Micro-5.4-2024-1771,SUSE-SLE-Micro-5.5-2024-1771,SUSE-SLE-Module-Basesystem-15-SP5-2024-1771,SUSE-SLE-Module-Basesystem-15-SP6-2024-1771,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1771,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1771,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1771,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1771,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1771,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1771,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1771,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1771,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1771,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1771,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1771,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1771,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1771,SUSE-SUSE-MicroOS-5.1-2024-1771,SUSE-SUSE-MicroOS-5.2-2024-1771,SUSE-Storage-7.1-2024-1771,openSUSE-Leap-Micro-5.3-2024-1771,openSUSE-Leap-Micro-5.4-2024-1771,openSUSE-SLE-15.5-2024-1771,openSUSE-SLE-15.6-2024-1771",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1771-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:1771-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241771-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:1771-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018598.html"
},
{
"category": "self",
"summary": "SUSE Bug 1224277",
"url": "https://bugzilla.suse.com/1224277"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45733 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45745 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-46103 page",
"url": "https://www.suse.com/security/cve/CVE-2023-46103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-47855 page",
"url": "https://www.suse.com/security/cve/CVE-2023-47855/"
}
],
"title": "Security update for ucode-intel",
"tracking": {
"current_release_date": "2024-05-23T19:06:42Z",
"generator": {
"date": "2024-05-23T19:06:42Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:1771-1",
"initial_release_date": "2024-05-23T19:06:42Z",
"revision_history": [
{
"date": "2024-05-23T19:06:42Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-150200.41.1.i586",
"product": {
"name": "ucode-intel-20240514-150200.41.1.i586",
"product_id": "ucode-intel-20240514-150200.41.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-150200.41.1.x86_64",
"product": {
"name": "ucode-intel-20240514-150200.41.1.x86_64",
"product_id": "ucode-intel-20240514-150200.41.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.3",
"product": {
"name": "SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.4",
"product": {
"name": "SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.5",
"product": {
"name": "SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.3",
"product": {
"name": "SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.3",
"product": {
"name": "SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.1",
"product": {
"name": "SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.2",
"product": {
"name": "SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.2"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.3",
"product": {
"name": "openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.4",
"product": {
"name": "openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-150200.41.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64"
},
"product_reference": "ucode-intel-20240514-150200.41.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45733"
}
],
"notes": [
{
"category": "general",
"text": "Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45733",
"url": "https://www.suse.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45733",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-23T19:06:42Z",
"details": "important"
}
],
"title": "CVE-2023-45733"
},
{
"cve": "CVE-2023-45745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45745"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45745",
"url": "https://www.suse.com/security/cve/CVE-2023-45745"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45745",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.9,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-23T19:06:42Z",
"details": "important"
}
],
"title": "CVE-2023-45745"
},
{
"cve": "CVE-2023-46103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-46103"
}
],
"notes": [
{
"category": "general",
"text": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-46103",
"url": "https://www.suse.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-46103",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-23T19:06:42Z",
"details": "important"
}
],
"title": "CVE-2023-46103"
},
{
"cve": "CVE-2023-47855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-47855"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-47855",
"url": "https://www.suse.com/security/cve/CVE-2023-47855"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-47855",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Proxy 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"SUSE Manager Server 4.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.5:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap 15.6:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.3:ucode-intel-20240514-150200.41.1.x86_64",
"openSUSE Leap Micro 5.4:ucode-intel-20240514-150200.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-23T19:06:42Z",
"details": "important"
}
],
"title": "CVE-2023-47855"
}
]
}
suse-su-2024:1684-1
Vulnerability from csaf_suse
Published
2024-05-18 17:58
Modified
2024-05-18 17:58
Summary
Security update for ucode-intel
Notes
Title of the patch
Security update for ucode-intel
Description of the patch
This update for ucode-intel fixes the following issues:
Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)
- CVE-2023-45733: Fixed a potential security vulnerability in some
Intel® Processors that may have allowed information disclosure.
- CVE-2023-46103: Fixed a potential security vulnerability in Intel®
Core™ Ultra Processors that may have allowed denial of service.
- CVE-2023-45745,CVE-2023-47855: Fixed a potential security
vulnerabilities in some Intel® Trust Domain Extensions (TDX) module
software that may have allowed escalation of privilege.
Patchnames
SUSE-2024-1684,SUSE-SLE-SERVER-12-SP5-2024-1684
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ucode-intel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ucode-intel fixes the following issues:\n\nIntel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n\n- CVE-2023-45733: Fixed a potential security vulnerability in some\n Intel\u00ae Processors that may have allowed information disclosure.\n- CVE-2023-46103: Fixed a potential security vulnerability in Intel\u00ae\n Core\u2122 Ultra Processors that may have allowed denial of service.\n- CVE-2023-45745,CVE-2023-47855: Fixed a potential security\n vulnerabilities in some Intel\u00ae Trust Domain Extensions (TDX) module\n software that may have allowed escalation of privilege.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-1684,SUSE-SLE-SERVER-12-SP5-2024-1684",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1684-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:1684-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241684-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:1684-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018548.html"
},
{
"category": "self",
"summary": "SUSE Bug 1224277",
"url": "https://bugzilla.suse.com/1224277"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45733 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45745 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-46103 page",
"url": "https://www.suse.com/security/cve/CVE-2023-46103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-47855 page",
"url": "https://www.suse.com/security/cve/CVE-2023-47855/"
}
],
"title": "Security update for ucode-intel",
"tracking": {
"current_release_date": "2024-05-18T17:58:41Z",
"generator": {
"date": "2024-05-18T17:58:41Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:1684-1",
"initial_release_date": "2024-05-18T17:58:41Z",
"revision_history": [
{
"date": "2024-05-18T17:58:41Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-137.1.i586",
"product": {
"name": "ucode-intel-20240514-137.1.i586",
"product_id": "ucode-intel-20240514-137.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ucode-intel-20240514-137.1.x86_64",
"product": {
"name": "ucode-intel-20240514-137.1.x86_64",
"product_id": "ucode-intel-20240514-137.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-137.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64"
},
"product_reference": "ucode-intel-20240514-137.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ucode-intel-20240514-137.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
},
"product_reference": "ucode-intel-20240514-137.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45733"
}
],
"notes": [
{
"category": "general",
"text": "Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45733",
"url": "https://www.suse.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45733",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-18T17:58:41Z",
"details": "important"
}
],
"title": "CVE-2023-45733"
},
{
"cve": "CVE-2023-45745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45745"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45745",
"url": "https://www.suse.com/security/cve/CVE-2023-45745"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45745",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.9,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-18T17:58:41Z",
"details": "important"
}
],
"title": "CVE-2023-45745"
},
{
"cve": "CVE-2023-46103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-46103"
}
],
"notes": [
{
"category": "general",
"text": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-46103",
"url": "https://www.suse.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-46103",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-18T17:58:41Z",
"details": "important"
}
],
"title": "CVE-2023-46103"
},
{
"cve": "CVE-2023-47855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-47855"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-47855",
"url": "https://www.suse.com/security/cve/CVE-2023-47855"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-47855",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:ucode-intel-20240514-137.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:ucode-intel-20240514-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-18T17:58:41Z",
"details": "important"
}
],
"title": "CVE-2023-47855"
}
]
}
suse-su-2025:1032-1
Vulnerability from csaf_suse
Published
2025-03-26 14:22
Modified
2025-03-26 14:22
Summary
Security update for microcode_ctl
Notes
Title of the patch
Security update for microcode_ctl
Description of the patch
This update for microcode_ctl fixes the following issues:
- CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware
Logic for some Intel Processors may allow privileged user to
potentially enable denial of service via local access. (bsc#1237096)
- CVE-2024-36293: A potential security vulnerability in some Intel
Software Guard Extensions (Intel SGX) Platforms may allow denial
of service. Intel is releasing microcode updates to mitigate this
potential vulnerability. (bsc#1237096)
- CVE-2024-39355: A potential security vulnerability in some
13th and 14th Generation Intel Core Processors may allow denial
of service. Intel is releasing microcode and UEFI reference code
updates to mitigate this potential vulnerability. (bsc#1237096)
- CVE-2024-37020: A potential security vulnerability in the Intel
Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors
may allow denial of service. Intel is releasing software updates to
mitigate this potential vulnerability. (bsc#1237096)
- CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic
in some 4th and 5th Generation Intel Xeon Processors may allow an
authorized user to potentially enable denial of service via local access. (bsc#1233313)
- CVE-2024-23918: Improper conditions check in some Intel Xeon processor
memory controller configurations when using Intel SGX may allow a
privileged user to potentially enable escalation of privilege via
local access. (bsc#1233313)
- CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor
memory controller configurations when using Intel SGX may allow a privileged
user to potentially enable escalation of privilege via local access. (bsc#1233313)
- CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in
some Intel Processors may allow an privileged user to potentially enable a
denial of service via local access. (bsc#1230400)
- CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel
Processors may allow a privileged user to potentially enable information
disclosure via local access. (bsc#1230400)
- CVE-2024-24853: Incorrect behavior order in transition between executive
monitor and SMI transfer monitor (STM) in some Intel(R) Processor may
allow a privileged user to potentially enable escalation of privilege
via local access. (bsc#1229129)
- CVE-2024-25939: Mirrored regions with different values in 3rd Generation Intel(R)
Xeon(R) Scalable Processors may allow a privileged user to potentially enable
denial of service via local access. (bsc#1229129)
- CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation
Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable
escalation of privilege via local access. (bsc#1229129)
- CVE-2023-42667: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream
cache mechanism may allow an authenticated user to potentially enable escalation
of privilege via local access. (bsc#1229129)
- CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism
may allow an authenticated user to potentially enable escalation of privilege via
local access. (bsc#1229129)
- CVE-2023-45733: Hardware logic contains race conditions in some Intel(R) Processors
may allow an authenticated user to potentially enable partial information disclosure
via local access. (bsc#1224277)
- CVE-2023-46103: Sequence of processor instructions leads to unexpected behavior in
Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially
enable denial of service via local access. (bsc#1224277)
- CVE-2023-45745: Improper input validation in some Intel(R) TDX module software before
version 1.5.05.46.698 may allow a privileged user to potentially enable escalation
of privilege via local access. (bsc#1224277)
- CVE-2023-47855: Improper input validation in some Intel(R) TDX module software before
version 1.5.05.46.698 may allow a privileged user to potentially enable escalation
of privilege via local access. (bsc#1224277)
- CVE-2023-39368: Protection mechanism failure of bus lock regulator
for some Intel Processors may allow an unauthenticated user to
potentially enable denial of service via network access. (bsc#1221323)
- CVE-2023-38575: Non-transparent sharing of return predictor targets
between contexts in some Intel Processors may allow an authorized
user to potentially enable information disclosure via local access. (bsc#1221323)
- CVE-2023-28746: Information exposure through microarchitectural
state after transient execution from some register files for some
Intel Atom Processors may allow an authenticated user to potentially
enable information disclosure via local access. (bsc#1221323)
- CVE-2023-22655: Protection mechanism failure in some 3rd and 4th
Generation Intel Xeon Processors when using Intel SGX or Intel TDX
may allow a privileged user to potentially enable escalation of
privilege via local access. (bsc#1221323)
- CVE-2023-43490: Incorrect calculation in microcode keying mechanism
for some Intel Xeon D Processors with Intel SGX may allow a
privileged user to potentially enable information disclosure via
local access. (bsc#1221323)
- CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)
- CVE-2022-40982: Information exposure through microarchitectural state after transient
execution in certain vector execution units for some Intel(R) Processors may allow
an authenticated user to potentially enable information disclosure via local access. (bsc#1206418)
- CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable
processors may allow a privileged user to potentially enable information disclosure
via local access.
- CVE-2022-41804: Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some
Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation
of privilege via local access.
Other fixes:
- Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)
- Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html
- Security updates for INTEL-SA-01213 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html
- Security updates for INTEL-SA-01139 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
- Security updates for INTEL-SA-01228 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html
- Security updates for INTEL-SA-01194 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html
- Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.
- Update for functional issues. Refer to 13th/14th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
- Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
- Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.
- Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.
- Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
- Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
- Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.
- Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.
- Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.
- Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.
- Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details
- Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)
- Security updates for [INTEL-SA-01101](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html).
- Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).
- Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).
- Updated security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html).
- Updated security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html).
- Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
- Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
- Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
- Update for functional issues. Refer to [5th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/793902) for details.
- Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
- Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
- Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
- Update for functional issues. Refer to [Intel Xeon D-1700 and D-1800 Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714069) for details
- Intel CPU Microcode was updated to the 20241029 release (bsc#1230400)
- Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)
- Security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html)
- Security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html)
- Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
- Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
- Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
- Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)
- Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)
- Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)
- Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)
- Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)
- Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)
- Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
- Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
- Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
- Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details
- Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
- Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
- Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
- Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
- Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
- Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
- Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
- Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
- Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
- Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
- Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.
- Intel CPU Microcode was updated to 20240531 release:
- Update for functional issues. Refer to Intel Pentium Silver
and Intel Celeron Processor Specification Update
- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)
- Security updates for INTEL-SA-01051 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html
- Security updates for INTEL-SA-01052 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html
- Security updates for INTEL-SA-01036 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html
- Update for functional issues. Refer to 5th Gen Intel Xeon Processor Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
- Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
- Update for functional issues. Refer to 14th 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
- Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
- Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.
- - Intel CPU Microcode was updated to 20240312 release. (bsc#1221323)
- Security updates for INTEL-SA-INTEL-SA-00972 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html
- Security updates for INTEL-SA-INTEL-SA-00982 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html
- Security updates for INTEL-SA-INTEL-SA-00898 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
- Security updates for INTEL-SA-INTEL-SA-00960 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html
- Security updates for INTEL-SA-INTEL-SA-01045 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html
- Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.
- Update for functional issues. Refer to 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
- Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.
- Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.
- Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/341079 for details.
- Update for functional issues. Refer to 10th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/615213 for details.
- Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.
- Update for functional issues. Refer to 8th Generation Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338025 for details.
- Update for functional issues. Refer to 7th and 8th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/334663 for details.
- Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
- Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
- Update for functional issues. Refer to 3rd Generation Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634897 for details.
- Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.
- Update for functional issues. Refer to 2nd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338848 for details.
- Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.
- Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.
- Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.
- Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/613537 for details.
- Update for functional issues. Refer to Intel Atom C3000 Processor Product Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336345 for details.
- Update for functional issues. Refer to Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications https://cdrdv2.intel.com/v1/dl/getContent/636674 for details.
- Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336562 for details.
- Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634542 for details.
- Intel CPU Microcode was updated to 20231114 release. (bsc#1215278)
- Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)
- Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
- Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
- Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
- Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
- Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
- Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
- Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
- Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
- Intel CPU Microcode was updated to 20231114 pre-release (labeled 20231113). (bsc#1215278)
- Intel CPU Microcode was updated to 20230808 release. (bsc#1214099)
- Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)
- Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)
- Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)
- Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
- Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
- Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
- Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
- Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
- Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
- Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
- Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
- Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
- Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
- Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
- Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
- Update for functional issues. Refer to [Intel Xeon D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.
- Intel CPU Microcode was updated to 20230613 release.
- Intel CPU Microcode was updated to 20230512 release.
- Intel CPU Microcode was updated to 20230512 release. (bsc#1211382)
Patchnames
SUSE-2025-1032,SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2025-1032
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for microcode_ctl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for microcode_ctl fixes the following issues:\n\n - CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware\n Logic for some Intel Processors may allow privileged user to\n potentially enable denial of service via local access. (bsc#1237096)\n - CVE-2024-36293: A potential security vulnerability in some Intel\n Software Guard Extensions (Intel SGX) Platforms may allow denial\n of service. Intel is releasing microcode updates to mitigate this\n potential vulnerability. (bsc#1237096)\n - CVE-2024-39355: A potential security vulnerability in some\n 13th and 14th Generation Intel Core Processors may allow denial\n of service. Intel is releasing microcode and UEFI reference code\n updates to mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-37020: A potential security vulnerability in the Intel\n Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors\n may allow denial of service. Intel is releasing software updates to\n mitigate this potential vulnerability. (bsc#1237096)\n - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic\n in some 4th and 5th Generation Intel Xeon Processors may allow an\n authorized user to potentially enable denial of service via local access. (bsc#1233313) \n - CVE-2024-23918: Improper conditions check in some Intel Xeon processor\n memory controller configurations when using Intel SGX may allow a\n privileged user to potentially enable escalation of privilege via\n local access. (bsc#1233313)\n - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor\n memory controller configurations when using Intel SGX may allow a privileged\n user to potentially enable escalation of privilege via local access. (bsc#1233313)\n - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in\n some Intel Processors may allow an privileged user to potentially enable a\n denial of service via local access. (bsc#1230400)\n - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel\n Processors may allow a privileged user to potentially enable information\n disclosure via local access. (bsc#1230400)\n - CVE-2024-24853: Incorrect behavior order in transition between executive\n monitor and SMI transfer monitor (STM) in some Intel(R) Processor may\n allow a privileged user to potentially enable escalation of privilege\n via local access. (bsc#1229129)\n - CVE-2024-25939: Mirrored regions with different values in 3rd Generation Intel(R)\n Xeon(R) Scalable Processors may allow a privileged user to potentially enable\n denial of service via local access. (bsc#1229129)\n - CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation\n Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable\n escalation of privilege via local access. (bsc#1229129)\n - CVE-2023-42667: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream\n cache mechanism may allow an authenticated user to potentially enable escalation\n of privilege via local access. (bsc#1229129)\n - CVE-2023-49141: Improper isolation in some Intel(R) Processors stream cache mechanism\n may allow an authenticated user to potentially enable escalation of privilege via\n local access. (bsc#1229129)\n - CVE-2023-45733: Hardware logic contains race conditions in some Intel(R) Processors\n may allow an authenticated user to potentially enable partial information disclosure\n via local access. (bsc#1224277)\n - CVE-2023-46103: Sequence of processor instructions leads to unexpected behavior in\n Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially\n enable denial of service via local access. (bsc#1224277)\n - CVE-2023-45745: Improper input validation in some Intel(R) TDX module software before\n version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n of privilege via local access. (bsc#1224277)\n - CVE-2023-47855: Improper input validation in some Intel(R) TDX module software before\n version 1.5.05.46.698 may allow a privileged user to potentially enable escalation\n of privilege via local access. (bsc#1224277)\n - CVE-2023-39368: Protection mechanism failure of bus lock regulator\n for some Intel Processors may allow an unauthenticated user to\n potentially enable denial of service via network access. (bsc#1221323)\n - CVE-2023-38575: Non-transparent sharing of return predictor targets\n between contexts in some Intel Processors may allow an authorized\n user to potentially enable information disclosure via local access. (bsc#1221323) \n - CVE-2023-28746: Information exposure through microarchitectural\n state after transient execution from some register files for some\n Intel Atom Processors may allow an authenticated user to potentially\n enable information disclosure via local access. (bsc#1221323)\n - CVE-2023-22655: Protection mechanism failure in some 3rd and 4th\n Generation Intel Xeon Processors when using Intel SGX or Intel TDX\n may allow a privileged user to potentially enable escalation of\n privilege via local access. (bsc#1221323)\n - CVE-2023-43490: Incorrect calculation in microcode keying mechanism\n for some Intel Xeon D Processors with Intel SGX may allow a\n privileged user to potentially enable information disclosure via\n local access. (bsc#1221323)\n - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation (bsc#1215278)\n - CVE-2022-40982: Information exposure through microarchitectural state after transient\n execution in certain vector execution units for some Intel(R) Processors may allow\n an authenticated user to potentially enable information disclosure via local access. (bsc#1206418) \n - CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable\n processors may allow a privileged user to potentially enable information disclosure\n via local access.\n - CVE-2022-41804: Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some\n Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation\n of privilege via local access.\n\nOther fixes:\n \n- Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)\n - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html\n - Security updates for INTEL-SA-01213 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html\n - Security updates for INTEL-SA-01139 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html\n - Security updates for INTEL-SA-01228 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html\n - Security updates for INTEL-SA-01194 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html\n - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n - Update for functional issues. Refer to 13th/14th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.\n - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details\n\n- Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)\n - Security updates for [INTEL-SA-01101](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html).\n - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n - Security updates for [INTEL-SA-01079](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html).\n - Updated security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html).\n - Updated security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html).\n - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n - Update for functional issues. Refer to [5th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/793902) for details.\n - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n - Update for functional issues. Refer to [Intel Xeon D-1700 and D-1800 Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714069) for details\n\n- Intel CPU Microcode was updated to the 20241029 release (bsc#1230400)\n - Update for functional issues. Refer to [14th/13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n\n- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)\n - Security updates for [INTEL-SA-01103](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html)\n - Security updates for [INTEL-SA-01097](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html)\n - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n\n- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)\n - Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)\n - Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)\n - Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)\n - Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)\n - Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)\n - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.\n - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details\n - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.\n - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.\n\n- Intel CPU Microcode was updated to 20240531 release:\n - Update for functional issues. Refer to Intel Pentium Silver\n and Intel Celeron Processor Specification Update\n \n- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)\n - Security updates for INTEL-SA-01051 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html\n - Security updates for INTEL-SA-01052 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html\n - Security updates for INTEL-SA-01036 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html\n - Update for functional issues. Refer to 5th Gen Intel Xeon Processor Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n - Update for functional issues. Refer to 14th 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n\n- - Intel CPU Microcode was updated to 20240312 release. (bsc#1221323)\n - Security updates for INTEL-SA-INTEL-SA-00972 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html\n - Security updates for INTEL-SA-INTEL-SA-00982 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\n - Security updates for INTEL-SA-INTEL-SA-00898 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html\n - Security updates for INTEL-SA-INTEL-SA-00960 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html\n - Security updates for INTEL-SA-INTEL-SA-01045 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html\n - Update for functional issues. Refer to Intel Core Ultra Processor https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.\n - Update for functional issues. Refer to 13th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.\n - Update for functional issues. Refer to 12th Generation Intel Core Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436 for details.\n - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123 for details.\n - Update for functional issues. Refer to 10th Gen Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/341079 for details.\n - Update for functional issues. Refer to 10th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/615213 for details.\n - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.\n - Update for functional issues. Refer to 8th Generation Intel Core Processor Families Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338025 for details.\n - Update for functional issues. Refer to 7th and 8th Generation Intel Core Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/334663 for details.\n - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.\n - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.\n - Update for functional issues. Refer to 3rd Generation Intel Xeon Scalable Processors Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634897 for details.\n - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.\n - Update for functional issues. Refer to 2nd Generation Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/338848 for details.\n - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details.\n - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071 for details.\n - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192 for details.\n - Update for functional issues. Refer to Intel Xeon Processor Scalable Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/613537 for details.\n - Update for functional issues. Refer to Intel Atom C3000 Processor Product Family Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336345 for details.\n - Update for functional issues. Refer to Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications https://cdrdv2.intel.com/v1/dl/getContent/636674 for details.\n - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/336562 for details.\n - Update for functional issues. Refer to Intel Pentium Silver and Intel Celeron Processor Specification Update https://cdrdv2.intel.com/v1/dl/getContent/634542 for details.\n \n- Intel CPU Microcode was updated to 20231114 release. (bsc#1215278)\n - Security updates for [INTEL-SA-00950](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html)\n - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n \n- Intel CPU Microcode was updated to 20231114 pre-release (labeled 20231113). (bsc#1215278)\n\n- Intel CPU Microcode was updated to 20230808 release. (bsc#1214099)\n - Security updates for [INTEL-SA-00828](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html) (bsc#1206418)\n - Security updates for [INTEL-SA-00836](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html)\n - Security updates for [INTEL-SA-00837](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html)\n - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.\n - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.\n - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.\n - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.\n - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.\n - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.\n - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.\n - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.\n - Update for functional issues. Refer to [4th Gen Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.\n - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.\n - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.\n - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.\n - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.\n - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.\n - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.\n - Update for functional issues. Refer to [Intel Xeon D-2100 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338854) for details.\n \n- Intel CPU Microcode was updated to 20230613 release.\n \n- Intel CPU Microcode was updated to 20230512 release.\n \n- Intel CPU Microcode was updated to 20230512 release. (bsc#1211382)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1032,SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2025-1032",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_1032-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:1032-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20251032-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:1032-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020609.html"
},
{
"category": "self",
"summary": "SUSE Bug 1206418",
"url": "https://bugzilla.suse.com/1206418"
},
{
"category": "self",
"summary": "SUSE Bug 1211382",
"url": "https://bugzilla.suse.com/1211382"
},
{
"category": "self",
"summary": "SUSE Bug 1214099",
"url": "https://bugzilla.suse.com/1214099"
},
{
"category": "self",
"summary": "SUSE Bug 1215278",
"url": "https://bugzilla.suse.com/1215278"
},
{
"category": "self",
"summary": "SUSE Bug 1221323",
"url": "https://bugzilla.suse.com/1221323"
},
{
"category": "self",
"summary": "SUSE Bug 1224277",
"url": "https://bugzilla.suse.com/1224277"
},
{
"category": "self",
"summary": "SUSE Bug 1229129",
"url": "https://bugzilla.suse.com/1229129"
},
{
"category": "self",
"summary": "SUSE Bug 1230400",
"url": "https://bugzilla.suse.com/1230400"
},
{
"category": "self",
"summary": "SUSE Bug 1233313",
"url": "https://bugzilla.suse.com/1233313"
},
{
"category": "self",
"summary": "SUSE Bug 1237096",
"url": "https://bugzilla.suse.com/1237096"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-40982 page",
"url": "https://www.suse.com/security/cve/CVE-2022-40982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-41804 page",
"url": "https://www.suse.com/security/cve/CVE-2022-41804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-22655 page",
"url": "https://www.suse.com/security/cve/CVE-2023-22655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-23583 page",
"url": "https://www.suse.com/security/cve/CVE-2023-23583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-23908 page",
"url": "https://www.suse.com/security/cve/CVE-2023-23908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-28746 page",
"url": "https://www.suse.com/security/cve/CVE-2023-28746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-38575 page",
"url": "https://www.suse.com/security/cve/CVE-2023-38575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-39368 page",
"url": "https://www.suse.com/security/cve/CVE-2023-39368/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-42667 page",
"url": "https://www.suse.com/security/cve/CVE-2023-42667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-43490 page",
"url": "https://www.suse.com/security/cve/CVE-2023-43490/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45733 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45745 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-46103 page",
"url": "https://www.suse.com/security/cve/CVE-2023-46103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-47855 page",
"url": "https://www.suse.com/security/cve/CVE-2023-47855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-49141 page",
"url": "https://www.suse.com/security/cve/CVE-2023-49141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-21820 page",
"url": "https://www.suse.com/security/cve/CVE-2024-21820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-21853 page",
"url": "https://www.suse.com/security/cve/CVE-2024-21853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-23918 page",
"url": "https://www.suse.com/security/cve/CVE-2024-23918/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-23984 page",
"url": "https://www.suse.com/security/cve/CVE-2024-23984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-24853 page",
"url": "https://www.suse.com/security/cve/CVE-2024-24853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-24968 page",
"url": "https://www.suse.com/security/cve/CVE-2024-24968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-24980 page",
"url": "https://www.suse.com/security/cve/CVE-2024-24980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25939 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25939/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-31068 page",
"url": "https://www.suse.com/security/cve/CVE-2024-31068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36293 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-37020 page",
"url": "https://www.suse.com/security/cve/CVE-2024-37020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39355 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39355/"
}
],
"title": "Security update for microcode_ctl",
"tracking": {
"current_release_date": "2025-03-26T14:22:25Z",
"generator": {
"date": "2025-03-26T14:22:25Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:1032-1",
"initial_release_date": "2025-03-26T14:22:25Z",
"revision_history": [
{
"date": "2025-03-26T14:22:25Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-1.17-102.83.81.1.i586",
"product": {
"name": "microcode_ctl-1.17-102.83.81.1.i586",
"product_id": "microcode_ctl-1.17-102.83.81.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "microcode_ctl-1.17-102.83.81.1.x86_64",
"product": {
"name": "microcode_ctl-1.17-102.83.81.1.x86_64",
"product_id": "microcode_ctl-1.17-102.83.81.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss-extreme-core:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "microcode_ctl-1.17-102.83.81.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
"product_id": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
},
"product_reference": "microcode_ctl-1.17-102.83.81.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-40982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-40982"
}
],
"notes": [
{
"category": "general",
"text": "Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-40982",
"url": "https://www.suse.com/security/cve/CVE-2022-40982"
},
{
"category": "external",
"summary": "SUSE Bug 1206418 for CVE-2022-40982",
"url": "https://bugzilla.suse.com/1206418"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2022-40982",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2022-40982"
},
{
"cve": "CVE-2022-41804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-41804"
}
],
"notes": [
{
"category": "general",
"text": "Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-41804",
"url": "https://www.suse.com/security/cve/CVE-2022-41804"
},
{
"category": "external",
"summary": "SUSE Bug 1214099 for CVE-2022-41804",
"url": "https://bugzilla.suse.com/1214099"
},
{
"category": "external",
"summary": "SUSE Bug 1215580 for CVE-2022-41804",
"url": "https://bugzilla.suse.com/1215580"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2022-41804"
},
{
"cve": "CVE-2023-22655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-22655"
}
],
"notes": [
{
"category": "general",
"text": "Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-22655",
"url": "https://www.suse.com/security/cve/CVE-2023-22655"
},
{
"category": "external",
"summary": "SUSE Bug 1221323 for CVE-2023-22655",
"url": "https://bugzilla.suse.com/1221323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2023-22655"
},
{
"cve": "CVE-2023-23583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-23583"
}
],
"notes": [
{
"category": "general",
"text": "Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-23583",
"url": "https://www.suse.com/security/cve/CVE-2023-23583"
},
{
"category": "external",
"summary": "SUSE Bug 1215278 for CVE-2023-23583",
"url": "https://bugzilla.suse.com/1215278"
},
{
"category": "external",
"summary": "SUSE Bug 1220178 for CVE-2023-23583",
"url": "https://bugzilla.suse.com/1220178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-23583"
},
{
"cve": "CVE-2023-23908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-23908"
}
],
"notes": [
{
"category": "general",
"text": "Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-23908",
"url": "https://www.suse.com/security/cve/CVE-2023-23908"
},
{
"category": "external",
"summary": "SUSE Bug 1214099 for CVE-2023-23908",
"url": "https://bugzilla.suse.com/1214099"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-23908"
},
{
"cve": "CVE-2023-28746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-28746"
}
],
"notes": [
{
"category": "general",
"text": "Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-28746",
"url": "https://www.suse.com/security/cve/CVE-2023-28746"
},
{
"category": "external",
"summary": "SUSE Bug 1213456 for CVE-2023-28746",
"url": "https://bugzilla.suse.com/1213456"
},
{
"category": "external",
"summary": "SUSE Bug 1221323 for CVE-2023-28746",
"url": "https://bugzilla.suse.com/1221323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2023-28746"
},
{
"cve": "CVE-2023-38575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-38575"
}
],
"notes": [
{
"category": "general",
"text": "Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-38575",
"url": "https://www.suse.com/security/cve/CVE-2023-38575"
},
{
"category": "external",
"summary": "SUSE Bug 1221323 for CVE-2023-38575",
"url": "https://bugzilla.suse.com/1221323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2023-38575"
},
{
"cve": "CVE-2023-39368",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-39368"
}
],
"notes": [
{
"category": "general",
"text": "Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-39368",
"url": "https://www.suse.com/security/cve/CVE-2023-39368"
},
{
"category": "external",
"summary": "SUSE Bug 1221323 for CVE-2023-39368",
"url": "https://bugzilla.suse.com/1221323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2023-39368"
},
{
"cve": "CVE-2023-42667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-42667"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-42667",
"url": "https://www.suse.com/security/cve/CVE-2023-42667"
},
{
"category": "external",
"summary": "SUSE Bug 1229129 for CVE-2023-42667",
"url": "https://bugzilla.suse.com/1229129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-42667"
},
{
"cve": "CVE-2023-43490",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-43490"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-43490",
"url": "https://www.suse.com/security/cve/CVE-2023-43490"
},
{
"category": "external",
"summary": "SUSE Bug 1221323 for CVE-2023-43490",
"url": "https://bugzilla.suse.com/1221323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2023-43490"
},
{
"cve": "CVE-2023-45733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45733"
}
],
"notes": [
{
"category": "general",
"text": "Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45733",
"url": "https://www.suse.com/security/cve/CVE-2023-45733"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45733",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-45733"
},
{
"cve": "CVE-2023-45745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45745"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45745",
"url": "https://www.suse.com/security/cve/CVE-2023-45745"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-45745",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.9,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-45745"
},
{
"cve": "CVE-2023-46103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-46103"
}
],
"notes": [
{
"category": "general",
"text": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-46103",
"url": "https://www.suse.com/security/cve/CVE-2023-46103"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-46103",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-46103"
},
{
"cve": "CVE-2023-47855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-47855"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-47855",
"url": "https://www.suse.com/security/cve/CVE-2023-47855"
},
{
"category": "external",
"summary": "SUSE Bug 1224277 for CVE-2023-47855",
"url": "https://bugzilla.suse.com/1224277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-47855"
},
{
"cve": "CVE-2023-49141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-49141"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-49141",
"url": "https://www.suse.com/security/cve/CVE-2023-49141"
},
{
"category": "external",
"summary": "SUSE Bug 1229129 for CVE-2023-49141",
"url": "https://bugzilla.suse.com/1229129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2023-49141"
},
{
"cve": "CVE-2024-21820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-21820"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-21820",
"url": "https://www.suse.com/security/cve/CVE-2024-21820"
},
{
"category": "external",
"summary": "SUSE Bug 1233313 for CVE-2024-21820",
"url": "https://bugzilla.suse.com/1233313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2024-21820"
},
{
"cve": "CVE-2024-21853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-21853"
}
],
"notes": [
{
"category": "general",
"text": "Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-21853",
"url": "https://www.suse.com/security/cve/CVE-2024-21853"
},
{
"category": "external",
"summary": "SUSE Bug 1233313 for CVE-2024-21853",
"url": "https://bugzilla.suse.com/1233313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2024-21853"
},
{
"cve": "CVE-2024-23918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-23918"
}
],
"notes": [
{
"category": "general",
"text": "Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-23918",
"url": "https://www.suse.com/security/cve/CVE-2024-23918"
},
{
"category": "external",
"summary": "SUSE Bug 1233313 for CVE-2024-23918",
"url": "https://bugzilla.suse.com/1233313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2024-23918"
},
{
"cve": "CVE-2024-23984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-23984"
}
],
"notes": [
{
"category": "general",
"text": "Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-23984",
"url": "https://www.suse.com/security/cve/CVE-2024-23984"
},
{
"category": "external",
"summary": "SUSE Bug 1230400 for CVE-2024-23984",
"url": "https://bugzilla.suse.com/1230400"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2024-23984"
},
{
"cve": "CVE-2024-24853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-24853"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-24853",
"url": "https://www.suse.com/security/cve/CVE-2024-24853"
},
{
"category": "external",
"summary": "SUSE Bug 1229129 for CVE-2024-24853",
"url": "https://bugzilla.suse.com/1229129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2024-24853"
},
{
"cve": "CVE-2024-24968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-24968"
}
],
"notes": [
{
"category": "general",
"text": "Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-24968",
"url": "https://www.suse.com/security/cve/CVE-2024-24968"
},
{
"category": "external",
"summary": "SUSE Bug 1230400 for CVE-2024-24968",
"url": "https://bugzilla.suse.com/1230400"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2024-24968"
},
{
"cve": "CVE-2024-24980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-24980"
}
],
"notes": [
{
"category": "general",
"text": "Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-24980",
"url": "https://www.suse.com/security/cve/CVE-2024-24980"
},
{
"category": "external",
"summary": "SUSE Bug 1229129 for CVE-2024-24980",
"url": "https://bugzilla.suse.com/1229129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2024-24980"
},
{
"cve": "CVE-2024-25939",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25939"
}
],
"notes": [
{
"category": "general",
"text": "Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25939",
"url": "https://www.suse.com/security/cve/CVE-2024-25939"
},
{
"category": "external",
"summary": "SUSE Bug 1229129 for CVE-2024-25939",
"url": "https://bugzilla.suse.com/1229129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "important"
}
],
"title": "CVE-2024-25939"
},
{
"cve": "CVE-2024-31068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-31068"
}
],
"notes": [
{
"category": "general",
"text": "Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-31068",
"url": "https://www.suse.com/security/cve/CVE-2024-31068"
},
{
"category": "external",
"summary": "SUSE Bug 1237096 for CVE-2024-31068",
"url": "https://bugzilla.suse.com/1237096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2024-31068"
},
{
"cve": "CVE-2024-36293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36293"
}
],
"notes": [
{
"category": "general",
"text": "Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36293",
"url": "https://www.suse.com/security/cve/CVE-2024-36293"
},
{
"category": "external",
"summary": "SUSE Bug 1237096 for CVE-2024-36293",
"url": "https://bugzilla.suse.com/1237096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2024-36293"
},
{
"cve": "CVE-2024-37020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-37020"
}
],
"notes": [
{
"category": "general",
"text": "Sequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-37020",
"url": "https://www.suse.com/security/cve/CVE-2024-37020"
},
{
"category": "external",
"summary": "SUSE Bug 1237096 for CVE-2024-37020",
"url": "https://bugzilla.suse.com/1237096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2024-37020"
},
{
"cve": "CVE-2024-39355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39355"
}
],
"notes": [
{
"category": "general",
"text": "Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39355",
"url": "https://www.suse.com/security/cve/CVE-2024-39355"
},
{
"category": "external",
"summary": "SUSE Bug 1237096 for CVE-2024-39355",
"url": "https://bugzilla.suse.com/1237096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:microcode_ctl-1.17-102.83.81.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-26T14:22:25Z",
"details": "moderate"
}
],
"title": "CVE-2024-39355"
}
]
}
ghsa-xp8f-77p3-p5rv
Vulnerability from github
Published
2024-05-16 21:32
Modified
2024-05-16 21:32
Severity ?
VLAI Severity ?
Details
Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.
{
"affected": [],
"aliases": [
"CVE-2023-46103"
],
"database_specific": {
"cwe_ids": [
"CWE-1281"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-16T21:15:59Z",
"severity": "MODERATE"
},
"details": "Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.",
"id": "GHSA-xp8f-77p3-p5rv",
"modified": "2024-05-16T21:32:00Z",
"published": "2024-05-16T21:32:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46103"
},
{
"type": "WEB",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
gsd-2023-46103
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2023-46103",
"id": "GSD-2023-46103"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-46103"
],
"id": "GSD-2023-46103",
"modified": "2023-12-13T01:20:53.168216Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2023-46103",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…