UEFI EDK2 Capsule Update Vulnerabilities

Lenovo Security Advisory: LEN-2014-001 Potential Impact: Execution of arbitrary code Severity: Medium Summary: The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description: The open source EDK2 project provides a reference implementation of...

UEFI EDK2 Capsule Update Vulnerabilities - Lenovo Support US

No description provided...

Fedora 24 : 2:qemu (2016-a80eab65ba)

CVE-2016-4002: net: buffer overflow in MIPSnet bz 1326083 - CVE-2016-4952 scsi: pvscsi: out-of-bounds access issue - CVE-2016-4964: scsi: mptsas infinite loop bz 1339157 - CVE-2016-5106: scsi: megasas: out-of-bounds write bz 1339581 - CVE-2016-5105: scsi: megasas: stack information leakage bz...

SOL15679 - UEFI EDK2 Capsule Update vulnerabilities CVE-2014-4859 / CVE-2014-4860

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

PT-2021-7868 · Edk2 +8 · Edk2 +8

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to a buffer overflow in the SmmEntryPoint function of the open-source UEFI EDK2 development environment. This allows a remote attacker to access confidential data,...

PT-2021-4745 · Tianocore +8 · Tianocore Edk2 +8

Name of the Vulnerable Software and Affected Versions: NetworkPkg/IScsiDxe affected versions not specified Tianocore edk2 affected versions not specified Description: The issue is related to remotely exploitable buffer overflows in the NetworkPkg/IScsiDxe and the IScsiHexToBin function of the...

UEFI EDK2 Capsule Update vulnerabilities

Overview The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description The open source EDK2 project provides a reference implementation of the Unified Extensible Firmware Interface UEFI. Researchers at The MITRE Corporation have discovered...