TTCSIRT-253.121119: TT-CSIRT ADVISORY – INTEL SECURITY UPDATES

Intel has released security updates to address vulnerabilities in multiple products. An authenticated attacker with local access could exploit some of these vulnerabilities to gain escalation of privileges.

TTCSIRT strongly encourages administrators to review the following releases from Intel and implement the necessary remediation actions:

INTEL-SA-00237: Linux Administrative Tools Network Adapters
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00237.html

INTEL-SA-00284: FPGA SDK for OpenCL

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00284.html

INTEL-SA-00289: Processors Voltage Settings Modification

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00289.html

INTEL-SA-00299: Control Center-I

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00299.html

INTEL-SA-00311: Quartus Prime Pro Edition

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00311.html

INTEL-SA-00312: SCS Platform Discovery Utility

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00312.html

INTEL-SA-00317: Unexpected Page Fault in Virtualized Environment

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00317.html

INTEL-SA-00323: NUC Firmware

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00323.html

INTEL-SA-00324: Rapid Storage Technology

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00324.html