Medium WID-SEC-2024-2117 13 CVEs

Intel Prozessor: Mehrere Schwachstellen

Published Sep 10, 2024 · Updated Aug 4, 2025 · Revision 26 · de-DE

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: F5 Vendor: Fedora Vendor: HP Vendor: HPE Vendor: Intel Vendor: Juniper Networks Vendor: Lenovo Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Apstra Product: Avamar Product: BIG-IP Product: BIOS Product: Computer Product: Computer Product: Computer Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: PowerProtect Data Domain Product: PowerProtect Data Domain Management Center Product: PowerProtect Data Domain OS Product: PowerScale OneFS +3 more

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Prozessor ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen offenzulegen.

Product

Der Prozessor ist das zentrale Rechenwerk eines Computers.

Vulnerabilities 13

High 8.2

CVE-2023-42772

Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to po…

Sep 16, 2024
High 7.9

CVE-2024-23599

Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potent…

Sep 16, 2024
High 7.5

CVE-2023-41833

A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escala…

Sep 16, 2024
High 7.5

CVE-2023-43626

Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable…

Sep 16, 2024
High 7.5

CVE-2024-21829

Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to po…

Sep 16, 2024
High 7.5

CVE-2024-21871

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enab…

Sep 16, 2024
High 7.2

CVE-2024-21781

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable informati…

Sep 16, 2024
Medium 6.1

CVE-2023-22351

Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable esc…

Sep 16, 2024
Medium 6.1

CVE-2023-23904

NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially e…

Sep 16, 2024
Medium 5.3

CVE-2023-43753

Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enab…

Sep 16, 2024
Medium 5.3

CVE-2024-23984

Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable…

intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine

Sep 16, 2024
Medium 5.3

CVE-2024-24968

Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to pot…

intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine

Sep 16, 2024
Low 2.5

CVE-2023-25546

Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable deni…

Sep 16, 2024

Revision history

2025-08-04 #26
Neue Updates von Dell aufgenommen
2025-07-09 #25
Neue Updates von Juniper aufgenommen
2025-06-04 #24
Neue Updates von SUSE aufgenommen
2025-06-03 #23
Neue Updates von SUSE aufgenommen
2025-04-07 #22
Neue Updates von Dell aufgenommen
2025-03-26 #21
Neue Updates von SUSE aufgenommen
2025-02-11 #20
Neue Updates von HP aufgenommen
2024-12-23 #19
Neue Updates von Debian aufgenommen
2024-12-16 #18
Neue Updates von Dell aufgenommen
2024-12-11 #17
Neue Updates von HP aufgenommen
2024-12-10 #16
Neue Updates von Ubuntu aufgenommen
2024-12-03 #15
Neue Updates von Red Hat aufgenommen
2024-11-25 #14
Neue Updates von SUSE aufgenommen
2024-11-24 #13
Neue Updates von Debian aufgenommen
2024-11-17 #12
Neue Updates von SUSE aufgenommen
2024-11-13 #11
Neue Updates von Fedora aufgenommen
2024-11-12 #10
Neue Updates von LENOVO aufgenommen
2024-10-31 #9
Neue Updates von Amazon aufgenommen
2024-10-20 #8
Neue Updates von HP und F5 aufgenommen
2024-10-03 #7
Neue Updates von Dell aufgenommen
2024-09-24 #6
Neue Updates von Ubuntu aufgenommen
2024-09-19 #5
Neue Updates von SUSE aufgenommen
2024-09-16 #4
Neue Updates von HP aufgenommen
2024-09-15 #3
Neue Updates von Fedora aufgenommen
2024-09-12 #2
Neue Updates von HP aufgenommen

References

Intel Security Advisory INTEL-SA-01071 - UEFI Firmware vom 2024-09-10
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
Intel Security Advisory INTEL-SA-01097 - Processor vom 2024-09-10
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html
Intel Security Advisory INTEL-SA-01103 - Processor RAPL Interface vom 2024-09-10
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html
Dell Security Advisory DSA-2024-243 vom 2024-09-10
https://www.dell.com/support/kbdoc/de-de/000225475/dsa-2024-243-security-update-for-dell-client-platform-for-intel-platform-update-2024-3-advisories
Lenovo Security Advisory LEN-165524 vom 2024-09-11
https://support.lenovo.com/us/en/product_security/LEN-165524
HPE Security Bulletin HPESBHF04701 vom 2024-09-12
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04701en_us&docLocale=en_US
HPE Security Bulletin HPESBHF04702 vom 2024-09-12
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04702en_us&docLocale=en_US
Fedora Security Advisory FEDORA-2024-E6B5E38AE6 vom 2024-09-13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e6b5e38ae6
Fedora Security Advisory FEDORA-2024-D6726B5D75 vom 2024-09-13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d6726b5d75
Fedora Security Advisory FEDORA-2024-1D4155BD39 vom 2024-09-13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-1d4155bd39
HPE SECURITY BULLETIN HPESBHF04699 rev.1 vom 2024-09-17
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04699en_us&docLocale=en_US
SUSE Security Update SUSE-SU-2024:3332-1 vom 2024-09-19
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/A53UL5PPNSCLERJH4JPIPXJ2PZZ6ENPZ/
SUSE Security Update SUSE-SU-2024:3332-1 vom 2024-09-19
https://lists.suse.com/pipermail/sle-security-updates/2024-September/019465.html
SUSE Security Update SUSE-SU-2024:3332-1 vom 2024-09-19
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/A53UL5PPNSCLERJH4JPIPXJ2PZZ6ENPZ/
Ubuntu Security Notice USN-7033-1 vom 2024-09-25
https://ubuntu.com/security/notices/USN-7033-1
Dell Security Advisory DSA-2024-397 vom 2024-10-03
https://www.dell.com/support/kbdoc/de-de/000231954/dsa-2024-397-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
HP Security Bulletin HPSBHF03981 vom 2024-09-11
https://support.hp.com/us-en/document/ish_11456827-11456849-16/HPSBHF03981
F5 Security Advisory K000141501 vom 2024-10-19
https://my.f5.com/manage/s/article/K000141501
F5 Security Advisory K000141503 vom 2024-10-19
https://my.f5.com/manage/s/article/K000141503
Amazon Linux Security Advisory ALAS-2024-1950 vom 2024-10-31
https://alas.aws.amazon.com/ALAS-2024-1950.html
Amazon Linux Security Advisory ALAS-2024-2682 vom 2024-11-01
https://alas.aws.amazon.com/AL2/ALAS-2024-2682.html
Lenovo Security Advisory LEN-178303 vom 2024-11-13
https://support.lenovo.com/us/en/product_security/LEN-178303
Fedora Security Advisory FEDORA-2024-28EA86C8AA vom 2024-11-13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-28ea86c8aa
Fedora Security Advisory FEDORA-2024-7DFC167DF4 vom 2024-11-13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-7dfc167df4
Fedora Security Advisory FEDORA-2024-D20A106350 vom 2024-11-13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d20a106350
SUSE Security Update SUSE-SU-2024:3995-1 vom 2024-11-15
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019821.html
Debian Security Advisory DLA-3964 vom 2024-11-24
https://lists.debian.org/debian-lts-announce/2024/11/msg00022.html
SUSE Security Update SUSE-SU-2024:4053-1 vom 2024-11-26
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W55XIWF4ZIAHE3T6ORR5YPYWBSK4AFMG/
SUSE Security Update SUSE-SU-2024:4053-1 vom 2024-11-26
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/W55XIWF4ZIAHE3T6ORR5YPYWBSK4AFMG/
Red Hat Security Advisory RHSA-2024:10528 vom 2024-12-04
https://access.redhat.com/errata/RHSA-2024:10528
Ubuntu Security Notice USN-7149-1 vom 2024-12-11
https://ubuntu.com/security/notices/USN-7149-1
HPE Security Bulletin vom 2024-12-11
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04743en_us&docLocale=en_US
HPE Security Bulletin vom 2024-12-11
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04753en_us&docLocale=en_US
HPE Security Bulletin vom 2024-12-11
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04752en_us&docLocale=en_US
Dell Security Advisory DSA-2024-455 vom 2024-12-16
https://www.dell.com/support/kbdoc/de-de/000260794/dsa-2024-455-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
Debian Security Advisory DLA-4002 vom 2024-12-23
https://lists.debian.org/debian-lts-announce/2024/12/msg00024.html
HP Security Bulletin HPSBHF04003 vom 2025-01-29
https://support.hp.com/de-de/document/ish_11946316-11946962-16/HPSBHF04003
SUSE Security Update SUSE-SU-2025:1032-1 vom 2025-03-26
https://lists.suse.com/pipermail/sle-security-updates/2025-March/020609.html
Dell Security Advisory DSA-2025-167 vom 2025-04-07
https://www.dell.com/support/kbdoc/de-de/000304933/dsa-2025-167-security-update-for-dell-avamar-data-store-gen5a-multiple-third-party-component-vulnerabilities
SUSE Security Update SUSE-SU-2025:20286-1 vom 2025-06-04
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021040.html
SUSE Security Update SUSE-SU-2025:20092-1 vom 2025-06-04
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021285.html
SUSE Security Update SUSE-SU-2025:20058-1 vom 2025-06-04
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021269.html
Juniper Security Bulletin
https://supportportal.juniper.net/s/article/2025-07-Security-Bulletin-Juniper-Apstra-Multiple-Vulnerabilities-resolved-in-Intel-microcode-package?language=en_US
Security Update for Dell PowerProtect Data Domain
https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities