EulerOS Virtualization 3.0.6.0 : grub2 (EulerOS-SA-2023-2239)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the...

Oracle Linux 9 : grub2 (ELSA-2023-0752)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0752 advisory. - Fix CVE-2022-3775 Orabug: 34871953 - Resolves: CVE-2022-2601 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2023-34335

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service...

CVE-2023-34335

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service...

Design/Logic Flaw

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service...

CVE-2023-34335

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service...

CVE-2023-34335

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service...

CVE-2023-34335

CVE-2023-34335 affects AMI BMC (IPMI handler). An unauthenticated host can write to the host SPI flash, bypassing secure boot protections, with potential impact to integrity and availability. Exploitation status is not provided in the supplied documents. Several sources reference this vulnerabili...

BMC AMI 访问控制错误漏洞

BMC AMI BMC Automated Mainframe Intelligence is an automated mainframe intelligence solution from BMC USA. A security vulnerability exists in BMC AMI that stems from allowing an unauthenticated host to write to the mainframe SPI flash memory, bypassing secure boot protection and potentially leadi...

PT-2023-24820 · American Megatrends · Ami Bmc

Name of the Vulnerable Software and Affected Versions: AMI BMC affected versions not specified Description: The issue concerns a vulnerability in the IPMI handler of AMI BMC, allowing an unauthenticated host to write to a host SPI flash and bypass secure boot protections. This could lead to a los...

PT-2023-9234 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: u-boot affected versions not specified Description: The issue is related to a bug in u-boot that allows for access to the u-boot shell and interrupt over UART. This is caused by a buffer overflow in memory. An attacker could exploit this to...

EulerOS Virtualization 2.11.1 : grub2 (EulerOS-SA-2023-2043)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing...

EulerOS Virtualization 2.11.0 : grub2 (EulerOS-SA-2023-2095)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing...

The Bug Report - May 2023 Edition

The Bug Report – May 2023 Edition By Mark Bereza · June 7, 2023 Why am I here? In the film The Number 23, Jim Carrey masterfully portrays Walter Sparrow, a man who finds himself obsessed with the number 23 after coming upon a book detailing the 23 enigma, and begins to see it everywhere he looks,...

The Bug Report - May 2023 Edition

The Bug Report – May 2023 Edition By Mark Bereza · June 7, 2023 Why am I here? In the film The Number 23, Jim Carrey masterfully portrays Walter Sparrow, a man who finds himself obsessed with the number 23 after coming upon a book detailing the 23 enigma, and begins to see it everywhere he looks,...

PT-2023-15608 · Lenovo · Securebootdxe

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop and ThinkStation models affected versions not specified Description: A buffer overflow vulnerability in the SecureBootDXE BIOS driver could allow an attacker with local access to elevate their privileges to execute arbitrary...

SUSE-SU-2023:2351-1 Security update for installation-images

This update of installation-images fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36192 · Unknown · Installation-Images

Name of the Vulnerable Software and Affected Versions: installation-images affected versions not specified Description: The issue concerns a problem that has been fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer...

SUSE-SU-2023:2315-1 Security update for installation-images

This update of installation-images fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36184 · Unknown · Installation-Images

Name of the Vulnerable Software and Affected Versions: installation-images affected versions not specified Description: The issue is related to the secure boot key. The package installation-images has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information...