3716 matches found
kernel: execution in the early microcode loader
A stack-based buffer overflow flaw was found in the Linux kernel's early load microcode functionality. On a system with UEFI Secure Boot enabled, a local, privileged user could use this flaw to increase their privileges to the kernel ring0 level, bypassing intended restrictions in place...
BIOS implementations permit unsafe SMM function calls to memory locations outside of SMRAM
Overview Multiple BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of SMRAM. Description Multiple BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of SMRAM. According to Corey Kallenber...
Multiple Product UEFI System Local Security Bypass Vulnerabilities
UEFI is a standard that details a type of interface. This interface is used to automatically load the operating system from a pre-booted operating environment onto an operating system. A local security bypass vulnerability exists in multiple product UEFI systems where a boot script is used to...
DHS Warns of UEFI Hardware Vulnerabilities
The CERT/CC at Carnegie Mellon University today released three advisories warning of vulnerabilities that affect some unified extensible firmware interface UEFI systems and the BIOS of some Intel chipsets. Hardware and firmware vulnerabilities, such as these reported by Corey Kallenberg of MITRE...
UEFI implementations do not properly secure the EFI S3 Resume Boot Path boot script
Overview Some UEFI systems fail to properly restrict access to the boot script used by the EFI S3 Resume Boot Path, allowing an authenticated, local attacker to bypass various firmware write protections. Description According to Rafal Wojtczuk of Bromium and Corey Kallenberg of The MITRE...
Intel BIOS locking mechanism contains race condition that enables write protection bypass
Overview A race condition exists in Intel chipsets that rely solely on the BIOSCNTL.BIOSWE and BIOSCNTL.BLE bits as a BIOS write locking mechanism. Successful exploitation of this vulnerability may result in a bypass of this locking mechanism. Description CWE-362: Concurrent Execution using Share...
[SECURITY] Fedora 20 Update: mokutil-0.2.0-1.fc20
mokutil provides a tool to manage keys for Secure Boot through the MoK "Machine's Own Keys" mechanism...
[SECURITY] Fedora 20 Update: shim-signed-0.8-3
Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments. This package contains the version signed by the UEFI signing service...
[SECURITY] Fedora 19 Update: mokutil-0.2.0-1.fc19
mokutil provides a tool to manage keys for Secure Boot through the MoK "Machine's Own Keys" mechanism...
RedHat Update for shim RHSA-2014:1801-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: shim security update
Updated shim packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...
[SECURITY] Fedora 21 Update: shim-signed-0.8-1.fc22
Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments. This package contains the version signed by the UEFI signing service...
[SECURITY] Fedora 21 Update: shim-0.8-1.fc22
Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments...
[SECURITY] Fedora 21 Update: mokutil-0.2.0-1.fc21
mokutil provides a tool to manage keys for Secure Boot through the MoK "Machine's Own Keys" mechanism...
CAINE 6.0 "Dark Matter" - Distribution with a complete forensic environment
CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a project of Digital Forensics. Currently the project manager is Nanni Bassetti. CAINE offers a complete forensic environment that is organized to integrate existing software tools as software...
MS KB2962824: Update Rollup of Revoked Non-Compliant UEFI Modules
The remote host is missing Microsoft KB2962824, an update that revokes the digital signatures of four third-party Unified Extensible Firmware Interface UEFI modules. This update prevents the modules from being loaded on systems where UEFI Secure Boot is enabled. C Tenable Network Security, Inc...
MS KB2871690: Update to Revoke Non-compliant UEFI Modules
The remote host is missing Microsoft KB2871690, an update that revokes the digital signatures of nine third-party UEFI modules. This update prevents the modules from being loaded on systems where UEFI Secure Boot is enabled. C Tenable Network Security, Inc. include"compat.inc"; if description...
FixMeStick's first to supports Windows 8 with Secure Boot ON
Windows 8 PCs contain a new technology called Secure Boot that only boots devices that have been verified by Microsoft. Also Microsoft's own Offline Defender won't boot on Windows 8 PCs with Secure Boot on. Neither will Norton's Bootable Recovery Tool. We asked the guys at FixMeStick how their...
FixMeStick's first to supports Windows 8 with Secure Boot ON
Windows 8 PCs contain a new technology called Secure Boot that only boots devices that have been verified by Microsoft. Also Microsoft's own Offline Defender won't boot on Windows 8 PCs with Secure Boot on. Neither will Norton's Bootable Recovery Tool. We asked the guys at FixMeStick how their...
