Authentication Bypass

Linux kernel is vulnerable to Authentication Bypass. The vulnerability exists because the library does not properly enforce policy in certain conditions, which allows an attacker to bypass the Kernel lockdown restrictions when UEFI secure boot is disabled or unavailable and IMA appraisal is enabl...

SUSE: Security Advisory (SUSE-SU-2023:1961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2050-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

EulerOS Virtualization 2.9.1 : grub2 (EulerOS-SA-2023-1636)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the...

PT-2023-36153 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue concerns a problem that has been fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

SUSE-SU-2023:2000-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:1999-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36149 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue is related to the secure boot key. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2023-36150 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue concerns a problem that is fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a...

SUSE: Security Advisory (SUSE-SU-2023:1968-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:1968-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE-SU-2023:1961-1 Security update for s390-tools

This update of s390-tools fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:1958-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE: Security Advisory (SUSE-SU-2023:1941-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-36146 · Unknown · S390-Tools

Name of the Vulnerable Software and Affected Versions: s390-tools affected versions not specified Description: The issue is related to the secure boot key. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

SUSE: Security Advisory (SUSE-SU-2023:1958-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:1941-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE-SU-2023:1940-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE: Security Advisory (SUSE-SU-2023:1921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

This guide provides steps that organizations can take to assess whether users have been targeted or compromised by threat actors exploiting CVE-2022-21894 via a Unified Extensible Firmware Interface UEFI bootkit called BlackLotus. UEFI bootkits are particularly dangerous as they run at computer...