Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.

Intel Warns of Critical Info-Disclosure Bug in Security Engine

posted by martyb on Wednesday November 13 2019, @12:55AM   Printer-friendly
from the we-should-all-be-using-riscv dept.

upstart writes in with a submission, via IRC, for carny.

Intel Warns of Critical Info-Disclosure Bug in Security Engine

A critical security bug in the Intel Converged Security and Manageability Engine (CSME) could allow escalation of privilege, denial of service or information disclosure.

The details are included in a bug advisory that in total covers 77 vulnerabilities, 67 of which were found by internal Intel staff. The silicon giant has rolled out firmware updates and software patches to address these, which range in severity from the one critical flaw to a low-severity local privilege-escalation issue.

The affected products are: Intel CSME, Intel Server Platform Services (SPS), Intel Trusted Execution Engine (TXE), Intel Active Management Technology (AMT), Intel Platform Trust Technology (PTT) and Intel Dynamic Application Loader (DAL).

[...]The critical flaw is a heap overflow bug with a score of 9.6 out of 10 on the CVSS v.3 severity scale (CVE-2019-0169). It exists in the subsystem in the Intel CSME, which is a standalone chip on Intel CPUs that is used for remote management. The vulnerability and[sic] could allow an unauthenticated user to enable escalation of privileges, information disclosure or denial of service via adjacent access.

“Adjacent access” means that an attack must be launched from the same shared physical network or local IP subnet, or from within the same secure VPN or administrative network zone.

Read the rest of the article for details on the additional vulnerabilities that were addressed.

Original Submission

 
This discussion has been archived. No new comments can be posted.
Intel Warns of Critical Info-Disclosure Bug in Security Engine | Log In/Create an Account | Top | 27 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 2) by Mojibake Tengu on Wednesday November 13 2019, @02:12AM (8 children)

    by Mojibake Tengu (8598) on Wednesday November 13 2019, @02:12AM (#919667) Journal

    Unfortunately for Apple, the weakest part of the Apple design is the Intel CPU.

    --
    Respect Authorities. Know your social status. Woke responsibly.
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  
    Total Score:   2  

  • (Score: 2) by takyon on Wednesday November 13 2019, @02:13AM (6 children)

    by takyon (881) <takyonNO@SPAMsoylentnews.org> on Wednesday November 13 2019, @02:13AM (#919668) Journal

    They will move to Apple ARM chips [tomshardware.com]. Checkmate!

    --
    [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]

    • (Score: 4, Funny) by c0lo on Wednesday November 13 2019, @02:57AM

      by c0lo (156) Subscriber Badge on Wednesday November 13 2019, @02:57AM (#919685) Journal

      I can't stop to note the verb tense in the proposition just before the "Checkmate!"

      Besides, in the linked, there are some other bits

      This week's report from Bloomberg reiterated Macs running on Arm may arrive in 2020. Axios' report seemingly confirmed the claim, citing "developers and Intel officials."

      Which is like "Someone says the Jesus'es second coming may happen as soon as 2020"

      --
      https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford

    • (Score: 2) by Mojibake Tengu on Wednesday November 13 2019, @02:58AM (4 children)

      by Mojibake Tengu (8598) on Wednesday November 13 2019, @02:58AM (#919686) Journal

      Yes. Intel not to be trusted is the main reason. Also, Apple engineering zealots worship energy consumption reduction at all costs, which does not help users much and Intel's future either. There is only one thing which could motivate me to come back to Apple products again: an AMD based MacBook Pro at 19' size. Not an Intel, and definitely not a toy size mechanically fragile flat pack.

      --
      Respect Authorities. Know your social status. Woke responsibly.

      • (Score: 2) by jmichaelhudsondotnet on Wednesday November 13 2019, @12:32PM (3 children)

        by jmichaelhudsondotnet (8122) on Wednesday November 13 2019, @12:32PM (#919801) Journal

        19"

        ftfy

        And you thought no one was reading this deep in the thread.

        19' macbooks coming for xmas 2020!!!!!! You think you have seen a big screen, but wait til you see this!

        • (Score: 2) by hendrikboom on Thursday November 14 2019, @01:07AM (2 children)

          by hendrikboom (1125) Subscriber Badge on Thursday November 14 2019, @01:07AM (#920107) Homepage Journal

          For those who use metric, 19" is nineteen inches, about 50 cm.
          19' is nineteen feet, about 580 cm.

          -- hendrik

          • (Score: 2) by driverless on Thursday November 14 2019, @12:30PM (1 child)

            by driverless (4770) on Thursday November 14 2019, @12:30PM (#920302)

            What's that in furlongs? We haven't switched to these newfangled inchy things yet where I live.

            • (Score: 1, Touché) by Anonymous Coward on Friday November 15 2019, @11:11AM

              by Anonymous Coward on Friday November 15 2019, @11:11AM (#920654)

              It's 28.79 millifurlongs [wolframalpha.com]

  • (Score: 0) by Anonymous Coward on Wednesday November 13 2019, @08:31AM

    by Anonymous Coward on Wednesday November 13 2019, @08:31AM (#919763)

    What about that "made in China bit? Intel introduces one or more weaknesses into Apple products, and the (slave?) labor in China introduces more.