CVE-2016-2243

Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service BIOS recovery failure by leveraging administrative access...

CVE-2016-2243

Summary: CVE-2016-2243 concerns the Sure Start BIOS recovery on certain HP Commercial PCs (2015) that can be exploited locally by an administrator/root to cause a denial of service (BIOS recovery failure). What is affected: Sure Start implementation on listed HP 2015 commercial platforms (HP ZBoo...

CVE-2016-2243

Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service BIOS recovery failure by leveraging administrative access...

HPSBHF03439 rev.2 - HP Commercial PCs with Sure Start, Local Denial of Service

Potential Security Impact Denial of Service DoS Source: Hewlett­Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability with the Sure Start implementation on certain 2015 commercial platforms. This vulnerability could be...

openSUSE Security Update : qemu (openSUSE-2016-252)

This update fixes the following security issues : - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829 : This update also fixes a non-security bug : - Due to...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2016:0459-1)

This update fixes the following security issues : - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829 : This update also fixes a non-security bug : - Due to...

SUSE-SU-2016:0459-1 Security update for qemu

This update fixes the following security issues: - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829: This update also fixes a non-security bug: - Due to spa...

UEFI firmware image viewer and editor: UEFITool

It supports parsing of full BIOS images starting with the flash descriptor or any binary files containing UEFI volumes. Original development was started here at MDL forums as a cross-platform analog to PhoenixTool ‘s structure mode with some additional features, but the program’s engine was prove...

VirusTotal Firmware Malware Implant Scanning

Successful attacks against firmware are rare but provide hackers with one thing they covet most: persistence. Advanced attack groups have already accelerated their capabilities in finding ways to burrow into the BIOS and EFI as noted by the Snowden leaks’ description of the NSA’s attempts to...

How to Change Order of NICs in XenServer

Theinterface-rename is a utility included in Citrix Hypervisor 8.2 Cumulative Update 1 and XenServer 8. This utility allows for granular management of network interface cards to facilitate renaming and reordering of them from the default installed configuration. The interface-rename utility refer...

[SECURITY] Fedora 22 Update: grub2-2.02-0.18.fc22

The GRand Unified Bootloader GRUB is a highly configurable and customizab le bootloader with modular architecture. It support rich varietyof kernel for mats, file systems, computer architectures and hardware devices. This subpackage provides support for PC BIOS systems...

CentOS 7 : grub2 (CESA-2015:2623)

Updated grub2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

grub2 security update

CentOS Errata and Security Advisory CESA-2015:2653 Updated grub2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...

RHEL 7 : grub2 (RHSA-2015:2623)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2623 advisory. The grub2 packages provide version 2 of the Grand Unified Bootloader GRUB, a highly configurable and customizable bootloader with modular architectur...

Moderate: Red Hat Security Advisory: grub2 security and bug fix update

Updated grub2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

[SECURITY] Fedora 23 Update: grub2-2.02-0.25.fc23

The GRand Unified Bootloader GRUB is a highly configurable and customizab le bootloader with modular architecture. It support rich varietyof kernel for mats, file systems, computer architectures and hardware devices. This subpackage provides support for PC BIOS systems...

[SECURITY] Fedora 22 Update: grub2-2.02-0.17.fc22

The GRand Unified Bootloader GRUB is a highly configurable and customizab le bootloader with modular architecture. It support rich varietyof kernel for mats, file systems, computer architectures and hardware devices. This subpackage provides support for PC BIOS systems...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3896

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

Lenovo Hit With Criticism Over Second Rootkit-Like Utility

Lenovo is under fire again for installing a covert utility on laptops and desktops that some users have compared to a rootkit. The issue stems from a utility called the Lenovo Service Engine, that is designed to collect some system information and send it to Lenovo at the time the machine connect...