CVE-2022-29510: Buffer Overflow

First published: Tue Nov 14 2023(Updated: )

Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.

Credit: secure@intel.com

Affected Software	Affected Version	How to fix
All of
Intel Compute Module Hns2600bp Firmware	<02.01.0015
Intel Compute Module Hns2600bp
All of
Intel Compute Module Hns2600bpb Firmware	<02.01.0015
Intel Compute Module Hns2600bpb
All of
Intel Compute Module Hns2600bpb24 Firmware	<02.01.0015
Intel Compute Module Hns2600bpb24
All of
Intel Compute Module Hns2600bpb24r Firmware	<02.01.0015
Intel Compute Module Hns2600bpb24r
All of
Intel Compute Module Hns2600bpblc Firmware	<02.01.0015
Intel Compute Module Hns2600bpblc
All of
Intel Compute Module Hns2600bpblc24 Firmware	<02.01.0015
Intel Compute Module Hns2600bpblc24
All of
Intel Compute Module Hns2600bpblc24r Firmware	<02.01.0015
Intel Compute Module Hns2600bpblc24r
All of
Intel Compute Module Hns2600bpblcr Firmware	<02.01.0015
Intel Compute Module Hns2600bpblcr
All of
Intel Compute Module Hns2600bpbr Firmware	<02.01.0015
Intel Compute Module Hns2600bpbr
All of
Intel Compute Module Hns2600bpbrct Firmware	<02.01.0015
Intel Compute Module Hns2600bpbrct
All of
Intel Compute Module Hns2600bpq Firmware	<02.01.0015
Intel Compute Module Hns2600bpq
All of
Intel Compute Module Hns2600bpq24 Firmware	<02.01.0015
Intel Compute Module Hns2600bpq24
All of
Intel Compute Module Hns2600bpq24r Firmware	<02.01.0015
Intel Compute Module Hns2600bpq24r
All of
Intel Compute Module Hns2600bpqr Firmware	<02.01.0015
Intel Compute Module Hns2600bpqr
All of
Intel Compute Module Hns2600bpr Firmware	<02.01.0015
Intel Compute Module Hns2600bpr
All of
Intel Compute Module Hns2600bps Firmware	<02.01.0015
Intel Compute Module Hns2600bps
All of
Intel Compute Module Hns2600bps24 Firmware	<02.01.0015
Intel Compute Module Hns2600bps24
All of
Intel Compute Module Hns2600bps24r Firmware	<02.01.0015
Intel Compute Module Hns2600bps24r
All of
Intel Compute Module Hns2600bpsr Firmware	<02.01.0015
Intel Compute Module Hns2600bpsr
All of
Intel Server Board M10jnp2sb Firmware	<7.219
Intel Server Board M10jnp2sb
All of
Intel Server Board M20ntp2sb Firmware	<0022.d02
Intel Server Board M20ntp2sb
All of
Intel Server Board M70klp2sb Firmware	<01.04.0029
Intel Server Board M70klp2sb
All of
Intel Server Board S2600bpb Firmware	<02.01.0015
Intel Server Board S2600bpb
All of
Intel Server Board S2600bpbr Firmware	<02.01.0015
Intel Server Board S2600bpbr
All of
Intel Server Board S2600bpq Firmware	<02.01.0015
Intel Server Board S2600bpq
All of
Intel Server Board S2600bpqr Firmware	<02.01.0015
Intel Server Board S2600bpqr
All of
Intel Server Board S2600bps Firmware	<02.01.0015
Intel Server Board S2600bps
All of
Intel Server Board S2600bpsr Firmware	<02.01.0015
Intel Server Board S2600bpsr
All of
Intel Server System M20ntp1ur304 Firmware	<0022.d02
Intel Server System M20ntp1ur304
All of
Intel Server System M70klp4s2uhh Firmware	<01.04.0029
Intel Server System M70klp4s2uhh
All of
Intel Server System Mcb2208wfaf5 Firmware	<02.01.0015
Intel Server System Mcb2208wfaf5
All of
Intel Server System Vrn2224bpaf6 Firmware	<02.01.0015
Intel Server System Vrn2224bpaf6
All of
Intel Server System Vrn2224bphy6 Firmware	<02.01.0015
Intel Server System Vrn2224bphy6
All of
Intel Server System Zsb2224bpaf1 Firmware	<02.01.0015
Intel Server System Zsb2224bpaf1
All of
Intel Server System Zsb2224bpaf2 Firmware	<02.01.0015
Intel Server System Zsb2224bpaf2
All of
Intel Server System Zsb2224bphy1 Firmware	<02.01.0015
Intel Server System Zsb2224bphy1

Never miss a vulnerability like this again

Reference Links

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html

CVE-2022-29510: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact