Scientific Linux Security Update : grub2 on SL7.x x86_64 (20151119)

It was discovered that grub2 builds for EFI systems contained modules that were not suitable to be loaded in a Secure Boot environment. An attacker could use this flaw to circumvent the Secure Boot mechanisms and load non- verified code. Attacks could use the boot menu if no password was set, or...

grub2 security and bug fix update

2.02-0.33.0.1 - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms bug 19231481 - update Oracle Linux certificates Alexey Petrenko - Put 'with' in menuentry instead of 'using' bug 18504756 - Use different titles for UEK and RHCK kernel...

Code injection

The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname...

CVE-2015-7063

The CVE-2015-7063 issue affects Apple macOS (OS X) EFI kernel loader prior to macOS 10.11.2. A local attacker can gain privileges through a crafted pathname, as described in the vulnerability summary. The impact is local privilege escalation, with the vulnerability rooted in EFI kernel-loader pat...

Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...

Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...

Oracle Linux 7 : grub2 (ELSA-2015-2401)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2401 advisory. - Once again, rebuild for the right build target. Resolves: CVE-2015-5281 - Remove multiboot and multiboot2 modules from the .efi builds; they should never have...

grub2 security, bug fix, and enhancement update

2.02-0.29.0.1 - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms bug 19231481 - update Oracle Linux certificates Alexey Petrenko - Put 'with' in menuentry instead of 'using' bug 18504756 - Use different titles for UEK and RHCK kernel...

Low: Red Hat Security Advisory: grub2 security, bug fix, and enhancement update

Updated grub2 packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

The vulnerability of the Mac OS X operating system allows a hacker to gain access to undeclared functions.

The vulnerability of the EFI module in the Mac OS X operating system is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to gain access to undeclared functions...

Mac OS X EFI Function Execution Vulnerability (EFI Security Update 2015-002)

The remote Mac OS X host is running an EFI firmware version that is affected by a function execution vulnerability due to an issue with handling EFI arguments. An unauthenticated, remote attacker can exploit this to execute arbitrary functions via unspecified vectors. TRUSTED...

Apple Mac EFI Unauthorized Access Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. Apple OS X versions prior to 10.11.1 and other products and Apple Mac versions prior to EFI 2015-002 improperly handle parameters and contain a security vulnerability that can be...

Mac OS X < 10.11 Multiple Vulnerabilities

Binary data 8982.prm...

Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities

Code execution, information disclosure, restrictions bypass, multiple memory corruptions, multiple libraries vulnerabilities...

APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002

APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002 Mac EFI Security Update 2015-002 is now available and addresses the following: EFI Available for: OS X Mavericks v10.9.5 Impact: An attacker can exercise unused EFI functions Description: An issue existed with EFI argument handling. This was...

CVE-2015-7035

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

Design/Logic Flaw

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

CVE-2015-7035

CVE-2015-7035 affects Apple Mac EFI: EFI arguments mishandled in Mac OS X pre-10.11.1, enabling an attacker to exercise unused EFI functions via unspecified vectors. Documented remediation is Mac EFI Security Update 2015-002 (APPLE-SA-2015-10-21-6). Connected sources confirm EFI involvement and C...

CVE-2015-7035

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

Apple Releases Multiple Security Updates

Apple has released several security updates to address critical vulnerabilities in multiple Apple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: OS X Server 5.0.15 for OS X Yosemite v10.10.5 and...