Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Firmware ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
Product
Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.
Vulnerabilities 10
-
High 8.2
Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow …
-
High 8.2
Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable es…
-
High 8.2
Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user…
-
High 7.9
Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enabl…
-
Medium 6.7
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to…
-
Medium 6.3
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to…
-
Medium 6.3
Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable inform…
-
Medium 6.1
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to…
-
Medium 6.0
Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable d…
-
Medium 6.0
Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable…
Revision history
-
#1
Initiale Fassung
References
-
Intel Security Advisory vom 2023-05-09
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html