CLSA-2024-1711477070 gmp: Fix of CVE-2021-43618

CVE-2021-43618: gmp security and enhancement update...

The vulnerability of the BIOS software in Dell PowerEdge servers and Dell Precision Rack workstations allows a perpetrator to gain unauthorized access to protected information and compromise the system.

The vulnerability of Time-of-Check-Time-of-Use TOCTOU and race conditions in the microprogramming software of Dell PowerEdge server and Dell Precision Rack workstations’ BIOS is related to state management errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

SUSE CVE-2023-52616

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpiecinit When the mpiecctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this iss...

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A buffer overflow vulnerability...

The vulnerability of the microprogramming software in the BIOS of Dell PowerEdge servers and Dell Precision Rack workstations allows a intruder to gain unauthorized access to protected information.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the microprogramming software in the BIOS of Dell PowerEdge servers and Dell Precision Rack workstations allows a intruder to gain unauthorized access to protected information.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

CVE-2024-0173

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0173

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

CVE-2024-0154

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0163

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

CVE-2024-0154

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

Design/Logic Flaw

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

Race condition

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

Design/Logic Flaw

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0173

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0173

CVE-2024-0173 concerns Dell PowerEdge Server BIOS and Dell Precision Rack BIOS, where an improper parameter initialization vulnerability could allow a local, low-privilege attacker to read contents of non-SMM stack memory. Affected firmware is BIOS-level, with exploitation requiring local access ...

CVE-2024-0154

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...