45 matches found
byterag-core (0.3.0), byterag-ffi (0.3.0) +8 more potentially affected by unknown CVE via s2n-tls (>=0.0.6, <=0.2.11)
s2n-tls CARGO version =0.0.6, =0.2.0-beta, =0.2.0-beta, =0.1.0, =1.18.0, =0.18.2, =0.18.2, =0.0.6, =0.2.11 Source cves: unknown CVE Source advisory: OSV:GHSA-857Q-XMPH-P2V5...
PC System Recovery Bootloader Vulnerabilities - Lenovo Support US
No description provided...
edk2 security, bug fix, and enhancement update
20230524-3 - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch bz2190244 - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch bz2211060 - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch bz2218196 - Resolves: bz2190244 EDK2 AMDSERVER 9.3 Bug OVMF AP Creatio...
Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules
Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...
August 9, 2022—KB5016616 (OS Builds 19042.1889, 19043.1889, and 19044.1889)
None None...
August 9, 2022—KB5016627 (OS Build 20348.887)
None None...
Malicious code in dbx-i18n (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47973d5ed65da3c90ff6a8d35d99063b5d2ad514d36d3c9482537bd1b9e2d5a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2365 Malicious code in dbx-i18n (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47973d5ed65da3c90ff6a8d35d99063b5d2ad514d36d3c9482537bd1b9e2d5a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
USN-5210-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the Linux kernel did not properly...
Security update for shim (important)
openSUSE Security Update: Security update for shim Announcement ID: openSUSE-SU-2021:0598-1 Rating: important References: 1173411 1174512 1175509 1177315 1177404 1177789 1182057 1184454 Cross-References: CVE-2019-14584 CVSS scores: CVE-2019-14584 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A...
SUSE SLED15 / SLES15 Security Update : shim (SUSE-SU-2020:2629-1)
This update for shim fixes the following issues : This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...
DEBIAN-CVE-2020-26541
The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c...
SUSE-SU-2020:2629-1 Security update for shim
This update for shim fixes the following issues: This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...
CVE-2020-7205
A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...
CVE-2020-7205
A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...
Information disclosure
A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...
CVE-2020-7205
CVE-2020-7205 affects HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting Toolkit. The root cause is insmod usage in GRUB2, enabling local code execution during the boot process. The issue is mitigated by HPE GRUB2 patches included in updated boot images (Intelligent Provis...
CVE-2020-7205
A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...
GRUB2 bootloader is vulnerable to buffer overflow
Overview The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled. Description GRUB2 is a multiboot boot loader that replaced GRUB Legacy in 2012. A boot loader is the first program that runs upon...