PT-2024-2090 · Dell · Dell Poweredge Server Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to an improper parameter initialization, which could be exploited by a local low privileged...

PT-2024-2089 · Dell · Dell Poweredge Server Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS versions affected versions not specified Dell Precision Rack BIOS versions affected versions not specified Description: The issue is related to an improper parameter initialization vulnerability in the BIOS software...

PT-2024-2312 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition in the BIOS microcode of Dell PowerEdge...

The vulnerability of Dell PowerEdge 14G server and Dell Precision workstation microprogramming software relates to writing beyond the buffer boundaries, allowing an attacker to execute arbitrary code or escalate their privileges.

The vulnerability of Dell PowerEdge 14G server and Dell Precision workstation microprogramming software lies in the issue of writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain increased privileges...

CVE-2021-47014

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix wild memory access when clearing fragments while testing re-assembly/re-fragmentation using actct, it's possible to observe a crash like the following one: KASAN: maybe wild-memory-access in range...

CVE-2021-47014 net/sched: act_ct: fix wild memory access when clearing fragments

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix wild memory access when clearing fragments while testing re-assembly/re-fragmentation using actct, it's possible to observe a crash like the following one: KASAN: maybe wild-memory-access in range...

CVE-2021-47014 net/sched: act_ct: fix wild memory access when clearing fragments

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix wild memory access when clearing fragments while testing re-assembly/re-fragmentation using actct, it's possible to observe a crash like the following one: KASAN: maybe wild-memory-access in range...

Dell PowerEdge Server BIOS License Issue Vulnerability

Dell PowerEdge Server BIOS is a system update driver for the Dell Dell of the United States. The Dell PowerEdge Server BIOS has an authorization issue vulnerability that stems from the inclusion of incorrect privilege management, which can be exploited by an unauthenticated, local attacker to cau...

CVE-2023-32460

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2023-32460

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...

Privilege escalation

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2023-32460

Dell PowerEdge BIOS contains an improper privilege management vulnerability that could allow an unauthenticated, local attacker to escalate privileges. Affected component: Dell PowerEdge Server BIOS. Root cause: improper privilege management within BIOS code (vendor-implied). Impact: local privil...

CVE-2023-32460

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...

Dell PowerEdge Server BIOS 访问控制错误漏洞

Dell PowerEdge Server BIOS is a system update driver for the Dell Dell of the United States. The Dell PowerEdge Server BIOS has an authorization issue vulnerability that stems from the inclusion of incorrect privilege management, which can be exploited by an unauthenticated, local attacker to cau...

CVE-2023-44297

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial ...

CVE-2023-44298

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service...

CVE-2023-44298

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service...

CVE-2023-44297

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial ...

Code injection

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service...

Information disclosure

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial ...