CVE-2021-21557

CVE-2021-21557 affects Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS, with an out-of-bounds array access in a privileged local context. The root cause is an out-of-bounds access in the BIOS/SMI handling, enabling a local attacker with high privileges to potentially cause denial o...

CVE-2021-21555

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service...

CVE-2021-21556

CVE-2021-21556 affects Dell PowerEdge BIOS/UEFI on R640/R740/R740XD/R840/R940/R940xa/MX740c/MX840c/T640 with NVDIMM-N. A stack-based buffer overflow in the BIOS Preboot Environment could allow a local high-privilege attacker to cause denial of service, execute arbitrary code, or disclose informat...

CVE-2021-21556

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Servic...

CVE-2021-21555

CVE-2021-21555 affects Dell PowerEdge server BIOS on R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 with NVDIMM-N. Root cause: heap-based buffer overflow in BIOS/UEFI Preboot Environment. Local privileged users could cause denial of service, arbitrary code execution, or informat...

CVE-2021-21554

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploi...

CVE-2021-21554

CVE-2021-21554 corresponds to a stack-based buffer overflow in Dell PowerEdge BIOS/UEFI on systems with Intel Optane DC Persistent Memory (R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and Dell Precision 7920 Rack Workstation). The root cause is a stack-based overflow in BIOS/UEFI Prebo...

Dell PowerEdge 缓冲区错误漏洞

Dell PowerEdge Server BIOS is a system update driver from Dell, a security vulnerability in Dell PowerEdge that could be exploited by attackers to cause a denial of service, execute arbitrary code, or compromise information in a UEFI or BIOS pre-boot environment...

PT-2021-14605 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to an out-of-bounds array access. A local malicious user with high privileges may exploit...

Dell PowerEdge 缓冲区错误漏洞

Dell PowerEdge Server BIOS is a system update driver from Dell Dell. A security vulnerability exists in Dell PowerEdge, which can be exploited by an attacker to cause a denial of service, arbitrary code execution, or information disclosure in a UEFI or BIOS pre-boot environment...

Dell PowerEdge Server 缓冲区错误漏洞

Dell PowerEdge Server BIOS is a system update driver from Dell Dell. A security vulnerability exists in Dell PowerEdge Server, which can be exploited by an attacker to cause a denial of service, arbitrary code execution, or information disclosure in system administration mode...

CVE-2021-32399

A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...

SUSE-SU-2021:1942-1 Security update for qemu

This update for qemu fixes the following issues: - Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream bsc1181103 - Fix OOB access in sdhci interface CVE-2020-17380, bsc1175144, CVE-2020-25085, bsc1176681, CVE-2021-3409, bsc1182282 - Fix potential...

CVE-2021-0070

Improper input validation in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

CVE-2021-0101

Buffer overflow in the BMC firmware for IntelR Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

Cross site scripting

Out of bounds write in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access...

Buffer overflow

Buffer overflow in the BMC firmware for IntelR Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

CVE-2021-0097

Path traversal in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access...

Intel Plugs 29 Holes in CPUs, Bluetooth, Security

Intel has unleashed 29 security advisories to plug up some serious bugs in the BIOS firmware for Intel processors, as well as in its Bluetooth products, Active Management Technology tools, the NUC Mini PC line, and, ironically, in its own security library. Details about the advisories can be foun...

Intel Server Board M10JNP2SB 输入验证错误漏洞

Intel Server Board M10JNP2SB is a processor from Intel Corporation USA. IntelR Server Board M10JNP2SB EFI BIOS prior to version 7215, BMC 8100.01.08 An input validation error vulnerability exists that stems from incorrect input validation, allowing an unauthenticated user to potentially escalate...