6611 matches found
PT-2016-6659
Name of the Vulnerable Software and Affected Versions Lenovo BIOS affected versions not specified Description The issue allows local administrators to execute arbitrary code with System Management Mode SMM privileges. This is achieved via unspecified vectors, indicating a potential flaw in the...
CVE-2016-5729: Undefined Security Weakness
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...
TPM "nvLocked" Permanent Flag may not be set
Customers can use the tool provided here that will determine if the “nvLocked” TPM permanent flag is set on their system, and will automatically set the flag if it has not been set already. The program will also show the user if the user non-volatile storage area is being used in their system or...
SMRAM data may be viewed on ThinkPad systems - Lenovo Support US
No description provided...
SMRAM data may be viewed on ThinkPad systems
Lenovo Security Advisory: LEN-3837 Potential Impact: Leakage of SMRAM data Severity: Low Summary: An attacker may be able to view but not modify the contents of System Management RAM SMRAM data on certain Lenovo ThinkPad systems. Description: SMRAM is a part of system memory used by the processor...
ThinkServer *50-series BIOS Password Encryption Weakness - Lenovo Support US
No description provided...
Lenovo Service Engine (LSE) BIOS for Notebook
Lenovo Security Advisory: LEN-2015-020 Potential Impact: Privilege Escalation Severity: High Summary: Vulnerabilities have been identified in the Lenovo Service Engine LSE which may run on certain Lenovo notebook systems that do not have a Lenovo preloaded operating system installed. Lenovo has...
ThinkServer *50-series BIOS Password Encryption Weakness
Lenovo Security Advisory: LEN-2015-018 Potential Impact: Password Disclosure Severity: Low Summary: The ThinkServer 50-series of servers store user and administrator BIOS passwords using a legacy, proprietary form of encryption. This issue was found during an internal security review and correcte...
ThinkCentre Hard Disk Password Bypass
Potential Impact: Severity Summary Description: Mitigation Strategy for Customers what you should do to protect yourself: Update to the latest BIOS for the affected ThinkCentre by following the instructions in the readme file from the links below. Users can also update their BIOS through Lenovo...
ThinkCentre Hard Disk Password Bypass - Lenovo Support US
No description provided...
Lenovo Service Engine (LSE) BIOS for Notebook - Lenovo Support US
No description provided...
RHEL 6 : qemu-kvm-rhev (RHSA-2016:1224)
An update for qemu-kvm-rhev is now available for RHEV-H and Agents for RHEL-6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
Important: Red Hat Security Advisory: qemu-kvm-rhev security update
An update for qemu-kvm-rhev is now available for RHEV-H and Agents for RHEL-6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
qemu: incorrect banked access bounds checking in vga module
An out-of-bounds read/write access flaw was found in the way QEMU's VGA emulation with VESA BIOS Extensions VBE support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU...
qemu-arch-extra: multiple issues
CVE-2015-8558 denial of service An infinite-loop issue was found in the QEMU emulator built with USB EHCI emulation support. The flaw occurred during communication between the host controller interfaceEHCI and a respective device driver. These two communicate using an isochronous transfer...
qemu: multiple issues
CVE-2015-8558 denial of service An infinite-loop issue was found in the QEMU emulator built with USB EHCI emulation support. The flaw occurred during communication between the host controller interfaceEHCI and a respective device driver. These two communicate using an isochronous transfer...
DEBIAN-CVE-2016-3712
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process crash by editing VGA registers in VBE mode...
qemu: incorrect banked access bounds checking in vga module
An out-of-bounds read/write access flaw was found in the way QEMU's VGA emulation with VESA BIOS Extensions VBE support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU...
Important: Red Hat Security Advisory: qemu-kvm-rhev security update
An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...