DEBIAN-CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

Design/Logic Flaw

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

UBUNTU-CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

Cisco FXOS Secure Boot Bypass

The vulnerability of the Cisco FXOS operating system’s secure boot process is related to deficiencies in the security measures of that process. Exploiting this vulnerability could allow attackers to circumvent the secure boot mechanism...

CVE-2020-24637

CVE-2020-24637 concerns two vulnerabilities in ArubaOS GRUB2 that allow bypassing secure boot to load an untrusted kernel, potentially compromising system integrity remotely. Affected products include Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, and Aruba 7200 Series Mobility Contr...

SUSE SLED15 / SLES15 Security Update : shim (SUSE-SU-2020:2629-1)

This update for shim fixes the following issues : This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

PT-2020-6594

Name of the Vulnerable Software and Affected Versions grub2 versions prior to 2.06 Description A flaw was found in grub2 where variable names in the command line are expanded into their corresponding contents using a 1kB stack buffer without sufficient bounds checking. This can lead to a stack...

Unbreakable Enterprise kernel security update

4.1.12-124.45.2 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32137965 CVE-2020-8694 CVE-2020-8695 4.1.12-124.45.1 - Revert 'x86/efi: Initialize and display UEFI secure boot state a bit later during init' Eric Snowberg Orabug: 31887248 - xfs: fix xfsinode use after free...

Unbreakable Enterprise kernel security update

5.4.17-2036.100.6.1.el8uek - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040802 CVE-2020-8694 CVE-2020-8695 - KVM: ioapic: break infinite recursion on lazy EOI Vitaly Kuznetsov Orabug: 32066585 CVE-2020-27152 CVE-2020-27152 - x86/mitigations: Restore paranoid checks fo...

Unbreakable Enterprise kernel security update

4.1.12-124.44.4 - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS [email protected] Orabug: 32020790 4.1.12-124.44.3 - qed: Reduce verbosity of unimplemented MFW messages Mintz, Yuval Orabug: 31959299 - kexec: validate pe files against the systemblacklistkeyring Eric...

Cisco Adaptive Security Appliance and Firepower Threat Defense Secure Boot Bypass Vulnerability

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance are both products of Cisco, Inc. Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services.Cisco Adaptive Security Appliance is a firewall and network security platform. Cisco...

Cisco FXOS Secure Boot Bypass Vulnerability

Cisco FXOS Software is a set of firewall software from Cisco that runs in Cisco security appliances. Cisco FXOS has a security vulnerability that stems from insufficient protection of the secure boot process. An attacker can exploit the vulnerability to break the chain of trust and inject code in...

Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass (cisco-sa-fxos-sbbp-XTuPkYTn)

According to its self-reported version, Cisco Firepower Extensible Operating System FXOS is affected by a secure boot bypass vulnerability. The vulnerability is due to insufficient protections of the secure boot process. A local attacker can exploit this vulnerability by injecting code into a...

CVE-2020-3458

Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software for the Firepower 1000 Series and Firepower 2100 Series Appliances could allow an authenticated, local attacker to bypass the secure boot mechanism. The...

CVE-2020-3455

A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulnerability is due to insufficient protections of the secure boot process. An attacker could exploit this vulnerability by injecting code into...

CVE-2020-3458

Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software for the Firepower 1000 Series and Firepower 2100 Series Appliances could allow an authenticated, local attacker to bypass the secure boot mechanism. The...