CentOS 7 : grub2 (CESA-2015:2623)

Updated grub2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

grub2 security update

CentOS Errata and Security Advisory CESA-2015:2653 Updated grub2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...

RHEL 7 : grub2 (RHSA-2015:2623)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2623 advisory. The grub2 packages provide version 2 of the Grand Unified Bootloader GRUB, a highly configurable and customizable bootloader with modular architectur...

Moderate: Red Hat Security Advisory: grub2 security and bug fix update

Updated grub2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

[SECURITY] Fedora 23 Update: grub2-2.02-0.25.fc23

The GRand Unified Bootloader GRUB is a highly configurable and customizab le bootloader with modular architecture. It support rich varietyof kernel for mats, file systems, computer architectures and hardware devices. This subpackage provides support for PC BIOS systems...

[SECURITY] Fedora 22 Update: grub2-2.02-0.17.fc22

The GRand Unified Bootloader GRUB is a highly configurable and customizab le bootloader with modular architecture. It support rich varietyof kernel for mats, file systems, computer architectures and hardware devices. This subpackage provides support for PC BIOS systems...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3896

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

Lenovo Hit With Criticism Over Second Rootkit-Like Utility

Lenovo is under fire again for installing a covert utility on laptops and desktops that some users have compared to a rootkit. The issue stems from a utility called the Lenovo Service Engine, that is designed to collect some system information and send it to Lenovo at the time the machine connect...

Lenovo Caught Using Rootkit to Secretly Install Unremovable Software

Two years ago Chinese firm Lenovo got banned from supplying equipment for networks of the intelligence and defense services various countries due to hacking and spying concerns. Earlier this year, Lenovo was caught red-handed for selling laptops pre-installed with Superfish malware. One of the mo...

Lenovo Service Engine (LSE) BIOS Vulnerability

Certain Lenovo personal computers contain a vulnerability in LSE a Lenovo BIOS feature. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Lenovo Security Advisories for notebooks and desktops...

BIOS vulnerability DELL and Apple systems-vulnerability warning-the black bar safety net

! Since the BIOS from sleep mode after Wake-Up due to failure to correctly set write-protected, the attacker may be brush malicious BIOS image, the vulnerability number CVE-2 0 1 5-2 8 9 0, the impact of a large number of DELL systems. Vulnerability details According to the researchers Cornwell,...

CERT found that most of the BIOS there is a security vulnerability-vulnerability warning-the black bar safety net

Carnegie Mellon University's computer Emergency Response Team-CERT today released in most of the BIOS Firmware vulnerability exists in the security Bulletin, the hacker can exploit the vulnerability to re-refresh the motherboard BIOS. In the X86 computer device to deploy a series of security...

CVE-2015-2890

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...

Code injection

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...

CVE-2015-2890

CVE-2015-2890 affects Dell Latitude, OptiPlex, Precision Mobile Workstation and Precision Workstation CS devices with model-dependent firmware before A21. The root cause is failure to enforce BIOS_CNTL locking protection when resuming from sleep, allowing a local attacker with console access to p...

CVE-2015-2890

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...

PT-2015-5955

Name of the Vulnerable Software and Affected Versions Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 Description The BIOS implementation does not enforce a BIOS CNTL locking protection mechanism...

BIOS implementations fail to properly set UEFI write protections after waking from sleep mode

Overview Multiple BIOS implementations fail to properly set write protections after waking from sleep, leading to the possibility of an arbitrary BIOS image reflash. Description According to Cornwell, Butterworth, Kovah, and Kallenberg, who reported the issue affecting certain Dell client systems...

Hacking Team Spyware preloaded with UEFI BIOS Rootkit to Hide Itself

Last Week someone just hacked the infamous Hacking Team, The Italy-based cyber weapons manufacturer and leaked a huge trove of 400GB internal data, including: Emails Hacking tools Zero-day exploits Surveillance tools Source code for Spyware A spreadsheet listing every government client with date ...