CVE-2020-26200

CVE-2020-26200 affects a component of Kaspersky’s custom boot loader used by Kaspersky Rescue Disk (KRD) and trusted by the Authentication Agent of Full Disk Encryption in KES. The issue stems from insufficient checks of authenticity for loaded UEFI modules, enabling the loading of untrusted UEFI...

CVE-2020-26200: Improper Authentication

A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk KRD and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security KES...

Kaspersky Endpoint Security UEFI Secure Boot Bypass

The vulnerability of the Kaspersky Endpoint Security anti-virus protection component and the Kaspersky Rescue Disk boot disk is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a remote attacker to bypass the UEFI Secure Boot security mechanism...

PT-2021-2011

Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security affected versions not specified Kaspersky Rescue Disk affected versions not specified Description: A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of...

ALBA-2021:0564 dbxtool bug fix and enhancement update

The dbxtool packages provide a command line utility and a one-shot systemd service for applying UEFI Secure Boot DBX updates. Bug Fixes and Enhancements: Dell AlmaLinux 8.2 BUG dbxtool: fails to list with 'EFI Signature List is malformed' BZ1912474...

dbxtool bug fix and enhancement update

The dbxtool packages provide a command line utility and a one-shot systemd service for applying UEFI Secure Boot DBX updates. Bug Fixes and Enhancements: Dell AlmaLinux 8.2 BUG dbxtool: fails to list with 'EFI Signature List is malformed' BZ1912474...

dbxtool bug fix and enhancement update

An update is available for dbxtool. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dbxtool packages provide a command line utility and a one-shot systemd...

SUSE-SU-2021:0099-1 Security update for openstack-dashboard, release-notes-suse-openstack-cloud

This update for openstack-dashboard, release-notes-suse-openstack-cloud fixes the following issues: - Fix open redirect OSSA-2020-008, CVE-2020-29565 - Fix horizon-nodejs jobs. - Add workaround for secure boot issue when shim package is updated. bsc1179955...

DEBIAN-CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

Design/Logic Flaw

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

UBUNTU-CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

Cisco FXOS Secure Boot Bypass

The vulnerability of the Cisco FXOS operating system’s secure boot process is related to deficiencies in the security measures of that process. Exploiting this vulnerability could allow attackers to circumvent the secure boot mechanism...

CVE-2020-24637

CVE-2020-24637 concerns two vulnerabilities in ArubaOS GRUB2 that allow bypassing secure boot to load an untrusted kernel, potentially compromising system integrity remotely. Affected products include Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, and Aruba 7200 Series Mobility Contr...

SUSE SLED15 / SLES15 Security Update : shim (SUSE-SU-2020:2629-1)

This update for shim fixes the following issues : This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

PT-2020-6594

Name of the Vulnerable Software and Affected Versions grub2 versions prior to 2.06 Description A flaw was found in grub2 where variable names in the command line are expanded into their corresponding contents using a 1kB stack buffer without sufficient bounds checking. This can lead to a stack...