4155 matches found
UBUNTU-CVE-2024-2312
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass...
CVE-2024-2312
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass...
CVE-2024-2312: Use After Free
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass...
SUSE CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...
CVE-2024-20265
A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...
CVE-2024-20265
A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...
CVE-2024-20265
A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...
CVE-2024-20265
Cisco Access Point Software is reported affected by a boot‑process vulnerability that allows an unauthenticated, physical attacker to bypass Cisco Secure Boot and load a tampered image. Root cause: unnecessary boot‑time commands at the physical console enable bypass of Secure Boot validation chec...
Cisco Access Point Software Secure Boot Bypass Vulnerability
A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...
PT-2024-2750 · Cisco · Cisco Access Point +1
Name of the Vulnerable Software and Affected Versions: Cisco Access Point AP Software versions affected versions not specified Description: The issue is related to a security bypass in the boot process of Cisco Access Point AP Software. This could allow an unauthenticated, physical attacker to...
CVE-2024-20265: Trust Boundary Violation
A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...
Cisco Access Point 安全漏洞
Cisco Access Point is a network access point device from Cisco, Inc. It provides high-density wireless connectivity for small offices. A security vulnerability exists in Cisco Access Point Software, which stems from a flaw in the boot process that could allow an unauthenticated physical attacker ...
EulerOS Virtualization 2.11.0 : grub2 (EulerOS-SA-2024-1427)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...
EulerOS Virtualization 2.11.1 : grub2 (EulerOS-SA-2024-1399)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...
edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()
REJECTED CVE A secure boot bypass vulnerability was found in EDK2 due to the lack of proper return value checks in the GetEfiGlobalVariable2 function. The API may fail if functions like AllocatePool or gRT-GetVariable fail. Without verifying the return value, an attacker could cause the API to...
[SECURITY] Fedora 38 Update: shim-unsigned-aarch64-15.8-2
Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments...
[SECURITY] Fedora 38 Update: shim-unsigned-x64-15.8-2
Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments...
[SECURITY] Fedora 38 Update: shim-15.8-2
Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments. This package contains the version signed by the UEFI signing service...
EulerOS Virtualization 2.10.1 : grub2 (EulerOS-SA-2024-1358)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...
