CVE-2024-0172

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2024-0172

CVE-2024-0172 affects Dell PowerEdge Server BIOS and Dell Precision Rack BIOS. The vulnerability is due to improper privilege management, enabling an unauthenticated local attacker to achieve privilege escalation. Affected component is the BIOS, with exploitability local and high impact on confid...

ROS-20240403-12

A vulnerability in the Range header analysis component of the modular interface between web servers and the Rack web applications is related to the creation of input data that could cause the analysis of the Content-Disposition header in Rack to take an unexpected amount of time...

Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 安全漏洞

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell USA.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is the Dell Precision Rack BIOS is a BIOS utility for high performance workstation products. A security vulnerability exist...

PT-2024-2751 · Dell · Dell Poweredge Server Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to improper privilege management in the BIOS of Dell PowerEdge Server and Dell Precision Rac...

SUSE SLES12 Security Update : rubygem-rack-1_4 (SUSE-SU-2024:0946-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0946-1 advisory. - CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing bsc1220239 - CVE-2024-26141: Fixed a Denial ...

The vulnerability of the BIOS software in Dell PowerEdge servers and Dell Precision Rack workstations allows a perpetrator to gain unauthorized access to protected information and compromise the system.

The vulnerability of Time-of-Check-Time-of-Use TOCTOU and race conditions in the microprogramming software of Dell PowerEdge server and Dell Precision Rack workstations’ BIOS is related to state management errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

SUSE-SU-2024:0946-1 Security update for rubygem-rack-1_4

This update for rubygem-rack-14 fixes the following issues: - CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing bsc1220239 - CVE-2024-26141: Fixed a Denial of Service Vulnerability in Range request header parsing bsc1220242 - CVE-2024-26146: Fixed a Denial of...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

Medium: pcs

Issue Overview: A Denial of Service DoS vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack's media type parser to take much longer than expected, leading to a possible denial of service vulnerability. CVE-2024-25126 A Denia...

Medium: pcs

Issue Overview: A Denial of Service DoS vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack's media type parser to take much longer than expected, leading to a possible denial of service vulnerability. CVE-2024-25126 A Denia...

Amazon Linux 2 : pcs (ALAS-2024-2492)

The version of pcs installed on the remote host is prior to 0.9.169-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2492 advisory. A Denial of Service DoS vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content typ...

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A buffer overflow vulnerability...

The vulnerability of the microprogramming software in the BIOS of Dell PowerEdge servers and Dell Precision Rack workstations allows a intruder to gain unauthorized access to protected information.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

The vulnerability of the microprogramming software in the BIOS of Dell PowerEdge servers and Dell Precision Rack workstations allows a intruder to gain unauthorized access to protected information.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CVE-2024-0173

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0154

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

CVE-2024-0163

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...