Most recent entries from all

bdu:2022-04966

Withdrawn: BELL-CVE-2022-21233 — CVE-2022-21233 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-727 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaqu…

certfr-2022-avi-727

EUVD-2026-237419

fkie_cve-2022-21233

Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

gsd-2022-21233

ICSA-23-166-10 — Siemens SIMATIC S7-1500 TM MFP BIOS

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…

OESA-2022-1969 — microcode_ctl security update

Affected: openEuler:20.03-LTS-SP1: microcode_ctl, openEuler:20.03-LTS-SP3: microcode_ctl, openEuler:22.03-LTS: microcode_ctl

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fix(es): Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2022-21233)

openSUSE-SU-2024:12254-1 — ucode-intel-20220809-1.1 on GA media

ucode-intel-20220809-1.1 on GA media

RHSA-2022:5939 — Red Hat Security Advisory: kernel-rt security and bug fix update

hw: cpu: incomplete clean-up of multi-core shared buffers (aka SBDR) hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS) hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW) hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability

SUSE-SU-2022:2832-1 — Security update for ucode-intel

Security update for ucode-intel

UBUNTU-CVE-2022-21233

Affected: Ubuntu:Pro:14.04:LTS: intel-microcode, Ubuntu:Pro:16.04:LTS: intel-microcode, Ubuntu:18.04:LTS: intel-microcode, Ubuntu:20.04:LTS: intel-microcode, Ubuntu:22.04:LTS: intel-microcode

Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

WID-SEC-W-2022-0986 — Intel Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Prozessoren ausnutzen, um Informationen offenzulegen.