Input validation

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service an...

Buffer overflow

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions...

Buffer overflow

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions...

CVE-2021-21574

Dell BIOSConnect vulnerability (CVE-2021-21574) is a buffer overflow in the Dell BIOSConnect feature of Dell Client BIOS. Exploitation requires an authenticated, local admin user and can lead to arbitrary code execution with UEFI/BIOS privileges, potentially bypassing UEFI restrictions. Public de...

CVE-2021-21574

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions...

CVE-2021-21573

Dell BIOSConnect feature contains a buffer overflow (CVE-2021-21573) in the Dell Client BIOS. An authenticated local admin can exploit this to execute arbitrary code and bypass UEFI restrictions. Dell released patches via BIOS firmware updates (per advisory 000188682); ensure affected systems are...

CVE-2021-21573

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions...

CVE-2021-21572

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions...

CVE-2021-21572

CVE-2021-21572 is a Dell BIOSConnect buffer-overflow vulnerability in the Dell Client BIOS. An authenticated malicious admin with local access could exploit the flaw to execute arbitrary code and bypass UEFI restrictions. Several connected sources (CNVD, NVD, CNNSC/nasl-like advisories, and Nessu...

CVE-2021-21571

CVE-2021-21571 concerns the Dell BIOSConnect/HTTPS Boot stack in Dell UEFI BIOS. The vulnerability is due to improper certificate validation in the BIOSConnect HTTPS path, enabling a MITM attacker to remotely deliver content and potentially cause denial of service and payload tampering. Affected ...

CVE-2021-21571

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service an...

Dell BIOSConnect feature 缓冲区错误漏洞

Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via HTTP methods. A buffer error vulnerability exists in the Dell BIOSConnect feature that can be exploited by an attacker to run arbitrary code and bypass UEFI restriction...

How to determine XenServer is booted in uefi or legacy mode

Determine XenServer is booted in uefi or legacy mode...

Hotfix XS82E025 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX316325 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Ubuntu: Security Advisory (USN-4992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4992-1: GRUB 2 vulnerabilities

Máté Kukri discovered that the acpi command in GRUB 2 allowed privileged users to load crafted ACPI tables when secure boot is enabled. An attacker could use this to bypass UEFI Secure Boot restrictions. CVE-2020-14372 Chris Coulson discovered that the rmmod command in GRUB 2 contained a use-...

Dell PowerEdge Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS is a system update driver from Dell Dell. A security vulnerability exists in Dell PowerEdge, which can be exploited by an attacker to cause a denial of service, arbitrary code execution, or information disclosure in a UEFI or BIOS pre-boot environment...

Dell PowerEdge Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS is a system update driver from Dell, a security vulnerability in Dell PowerEdge that could be exploited by attackers to cause a denial of service, execute arbitrary code, or compromise information in a UEFI or BIOS pre-boot environment...

CVE-2021-21555

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service...

CVE-2021-21554

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploi...