CVE-2019-6170

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution...

PT-2019-18001

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad affected versions not specified Description A potential issue in the SMI callback function used in the Legacy USB driver may allow arbitrary code execution. Recommendations At the moment, there is no information about a newer...

CVE-2019-6170: Undefined Security Weakness

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution...

PT-2019-18003

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad affected versions not specified Description A potential issue in the SMI callback function used in the Legacy USB driver may allow arbitrary code execution due to insufficient checking of passed parameters. Recommendations At t...

CVE-2019-6172: Undefined Security Weakness

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution...

CVE-2017-5842

The htmlcontexthandleelement function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds write via a crafted SMI file, as demonstrated by OneNoteManager.smi...

Security Bulletin: Denial of service vulnerability affects IBM Unified Extensible Firmware Interface (CVE-2019-6155)

Summary IBM has released the following Unified Extensible Firmware Interface UEFI fix for System x and BladeCenter systems in response to the following denial of service vulnerability. Vulnerability Details CVEID: CVE-2019-6155 DESCRIPTION: IBM System x and IBM BladeCenter systems are vulnerable ...

CVE-2019-6155

A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service...

Design/Logic Flaw

A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service...

CVE-2019-6155

CVE-2019-6155 is a denial-of-service vulnerability in the SMI handler of BIOS firmware on IBM System x and BladeCenter systems. The issue affects legacy IBM System x and BladeCenter models (e.g., BladeCenter HS23E, System x3630 M4, System x3530 M4, System x3650 M4 BD) where a specially crafted re...

CVE-2019-6155

A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service...

PT-2019-17988

Name of the Vulnerable Software and Affected Versions IBM System x and IBM BladeCenter systems affected versions not specified Description A potential issue was found in an SMI handler in the BIOS of certain legacy systems, which could lead to denial of service. Recommendations At the moment, the...

CVE-2019-6155: Undefined Security Weakness

A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service...

SMI Handler Vulnerability in legacy IBM System x and IBM BladeCenter systems - US

Lenovo Security Advisory: LEN-25165 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6155 Summary Description: During an internal security review, a potential vulnerability was found in an SMI handler in certain legacy IBM System x and...

Security Bulletin: The IBM V840 product model number AE1 node is affected by a vulnerability in OpenSSL (CVE-2014-0224 = SSL/TLS MITM vulnerability)

Summary Security vulnerability has been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: FlashSystem V840-AE1 uses OpenSSL to protect connection from external management applications which use SMI-S to its CIM client. Affected versions of OpenSSL do not properly...

BIOS SMI Handler Input Validation Failures - Lenovo Support US

No description provided...

Chrome: V8: JIT: Simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement optimization bug

I think this commit has introduced the bugs: https://chromium.googlesource.com/v8/v8/+/c22ca7f73ba92f22d0cd29b06bb2944a545a8d3e%5E%21/F0 Here's a snippet. case IrOpcode::kStoreField: FieldAccess access = FieldAccessOfnode-op; Node valuenode = node-InputAt1; NodeInfo inputinfo = GetInfovaluenode;...

Chrome V8 JIT - Simplified-lowererer IrOpcode::kStoreField_ IrOpcode::kStoreElement Optimization Bug

Chrome V8 JIT - Simplified-lowererer IrOpcode::kStoreField IrOpcode::kStoreElement Optimization Bug / I think this commit has introduced the bugs: https://chromium.googlesource.com/v8/v8/+/c22ca7f73ba92f22d0cd29b06bb2944a545a8d3e%5E%21/F0 Here's a snippet. case IrOpcode::kStoreField: FieldAccess...

CVE-2017-14374

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 aka 2016 R3.20 is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionalit...

Hardcoded credentials

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 aka 2016 R3.20 is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionalit...