DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Intel Prozessoren: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-06-08
Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
beschreibt (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-24489US | medium4.8 | — | ||
The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scri… | ||||
| CVE-2021-0089US | medium6.5 | — | ||
Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. | ||||
| CVE-2021-0086US | medium6.5 | — | ||
Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access… | ||||
| CVE-2020-24489US | high8.8 | — | ||
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. | ||||
| CVE-2021-0095US | medium4.4 | — | ||
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access. | ||||
| CVE-2020-8702US | high7.3 | — | ||
Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via… | ||||
| CVE-2020-8700US | medium6.7 | — | ||
Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2020-8670US | medium6.4OT erhöht | — | ||
Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2020-24513US | medium6.5OT erhöht | — | ||
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2020-24512US | low3.3OT erhöht | — | ||
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2020-24511US | medium6.5OT erhöht | — | ||
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2020-24486US | medium5.5OT erhöht | — | ||
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. | ||||
| CVE-2020-12360US | high7.8OT erhöht | — | ||
Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. | ||||
| CVE-2020-12359US | medium6.8 | — | ||
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical acces… | ||||
| CVE-2020-12358US | medium4.4OT erhöht | — | ||
Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. | ||||
| CVE-2020-12357US | medium6.7OT erhöht | — | ||
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2021-2305 vom 2021-06-11external
- Oracle Linux Security Advisory ELSA-2021-3027 vom 2021-08-09external
- Oracle Linux Security Advisory ELSA-2021-3028 vom 2021-08-09external
- Red Hat Security Advisory RHSA-2021:2299 vom 2021-06-09external
- Red Hat Security Advisory RHSA-2021:2300 vom 2021-06-09external
- Red Hat Security Advisory RHSA-2021:2301 vom 2021-06-09external
- Red Hat Security Advisory RHSA-2021:2302 vom 2021-06-09external
- Red Hat Security Advisory RHSA-2021:2303 vom 2021-06-09external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan