Skip to content
OpenAdvisories

Archive

16 February 2023

Vulnerabilities first published on this day (UTC), newest first.

172 results · Feed

  • Medium 6.5

    Nomad Client Vulnerable to Decompression Bombs in Artifact Block

    HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.

  • Medium 6.7

    Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potenti…

  • Medium 5.5

    Insufficiently protected credentials in the Intel(R) ON Event Series Android application before version 2.0 may allow a…

  • Medium 6.0

    Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may al…

  • Medium 6.5
    CVE-2021-33104 Public exploit

    Improper access control in the Intel(R) OFU software before version 14.1.28 may allow an authenticated user to potentia…

  • Low 3.8

    Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially …

  • High 7.8

    Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated …

  • Medium 4.3

    Server-side request forgery in the CVAT software maintained by Intel(R) before version 2.0.1 may allow an authenticated…

  • Medium 6.3

    Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows befo…

  • Medium 6.0

    Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version …

  • Medium 6.7

    Uncontrolled search path in some Intel(R) QAT drivers for Windows before version 1.6 may allow an authenticated user to…

  • High 7.3

    Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may…

  • Medium 4.4

    Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13…

  • Low 3.3

    Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 …

  • Medium 4.0

    Uncaught exception in the FCS Server software maintained by Intel before version 1.1.79.3 may allow a privileged user t…

  • High 8.4

    Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an au…

  • High 7.2

    Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using …

  • Medium 4.5

    Uncaught exception in webserver for the Integrated BMC in some Intel(R) platforms before versions 2.86, 2.09 and 2.78 m…

  • High 7.5

    Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated use…

  • Medium 6.5

    Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and bhs-04-45…

  • Low 3.3

    Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authentica…

  • Medium 4.2

    Out-of-bounds read in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticat…

  • Medium 4.8

    Out-of-bounds write in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authentica…

  • Medium 4.8

    Integer overflow in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated…

  • Low 2.2

    NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to po…

  • Low 2.8

    Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user t…

  • Medium 4.8

    Out-of-bounds read in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentia…

  • Medium 5.7

    Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user t…

  • Medium 5.7

    Improper buffer restrictions in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user t…

  • Medium 6.1

    Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may al…

  • Low 3.1

    Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow a privileged user to potentially…

  • Medium 5.6

    Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potenti…

  • Medium 5.5

    Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potenti…

  • Medium 6.7

    Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potenti…

  • Medium 5.9

    Improper conditions check in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to pot…

  • High 7.1

    Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to poten…

  • High 7.4

    Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to pot…

  • High 7.7

    Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to poten…

  • Medium 6.7

    Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software bef…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated…