Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6797-1 advisory.

    It was discovered that some 3rd and 4th Generation Intel Xeon Processors did not properly restrict     access to certain hardware features when using Intel SGX or Intel TDX. This may allow a privileged     local user to potentially further escalate their privileges on the system. This issue only affected Ubuntu     23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-22655)

    It was discovered that some Intel Atom Processors did not properly clear register state when     performing various operations. A local attacker could use this to obtain sensitive information via a     transient execution attack. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS,     Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-28746)

    It was discovered that some Intel Processors did not properly clear the state of various hardware     structures when switching execution contexts. A local attacker could use this to access privileged     information. This issue only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS     and Ubuntu 16.04 LTS. (CVE-2023-38575)

    It was discovered that some Intel Processors did not properly enforce bus lock regulator protections. A     remote attacker could use this to cause a denial of service. This issue only affected Ubuntu 23.10, Ubuntu     22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2023-39368)

    It was discovered that some Intel Xeon D Processors did not properly calculate the SGX base key when     using Intel SGX. A privileged local attacker could use this to obtain sensitive information. This issue     only affected Ubuntu 23.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS and Ubuntu 16.04 LTS.
    (CVE-2023-43490)

    It was discovered that some Intel Processors did not properly protect against concurrent accesses. A     local attacker could use this to obtain sensitive information. (CVE-2023-45733)

    It was discovered that some Intel Processors TDX module software did not properly validate input. A     privileged local attacker could use this information to potentially further escalate their privileges on     the system. (CVE-2023-45745, CVE-2023-47855)

    It was discovered that some Intel Core Ultra processors did not properly handle particular     instruction sequences. A local attacker could use this issue to cause a denial of service.
    (CVE-2023-46103)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1771-1 advisory.

    Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)

    - CVE-2023-45733: Fixed a potential security vulnerability in some       Intel? Processors that may have allowed information disclosure.
    - CVE-2023-46103: Fixed a potential security vulnerability in Intel?       Core Ultra Processors that may have allowed denial of service.
    - CVE-2023-45745,CVE-2023-47855: Fixed a potential security       vulnerabilities in some Intel? Trust Domain Extensions (TDX) module       software that may have allowed escalation of privilege.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1684-1 advisory.

  - Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to     potentially enable partial information disclosure via local access. (CVE-2023-45733)

  - Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a     privileged user to potentially enable escalation of privilege via local access. (CVE-2023-45745,     CVE-2023-47855)

  - Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may     allow an authenticated user to potentially enable denial of service via local access. (CVE-2023-46103)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5afd64ae-122a-11ef-8eed-1c697a616631 advisory.

  - Intel reports:            Potential security vulnerabilities in some Intel Trust Domain     Extensions (TDX) module software may allow escalation of           privilege. Improper input validation in     some Intel TDX module           software before version 1.5.05.46.698 may allow a privileged user to     potentially enable escalation of privilege via local access.  Intel           is releasing firmware     updates to mitigate these potential           vulnerabilities.                      A potential security     vulnerability in some Intel Processors may           allow information disclosure.  Hardware logic     contains race           conditions in some Intel Processors that may allow an authenticated           user     to potentially enable partial information disclosure via local           access. Intel is releasing     microcode updates to mitigate this           potential vulnerability.                      A potential     security vulnerability in Intel Core Ultra Processors           may allow denial of service.  Sequence of     processor instructions           leads to unexpected behavior in Intel Core Ultra Processors may     allow an authenticated user to potentially enable denial of service           via local access.  Intel is     releasing microcode updates to mitigate           this potential vulnerability.           (CVE-2023-45733,     CVE-2023-45745, CVE-2023-46103)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198069	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Intel Microcode vulnerabilities (USN-6797-1)	Nessus	Ubuntu Local Security Checks	high
197920	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:1771-1)	Nessus	SuSE Local Security Checks	high
197548	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2024:1684-1)	Nessus	SuSE Local Security Checks	high
197097	FreeBSD : Intel CPUs -- multiple vulnerabilities (5afd64ae-122a-11ef-8eed-1c697a616631)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2023-45745

high

Tenable Plugins

high

high

high

high