CVE-2019-1736 Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability

A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface UEFI Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to improp...

CVE-2019-1736 Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability

A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface UEFI Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to improp...

SUSE-SU-2020:14490-1 Security update for shim

This update for shim fixes the following issues: Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...

SUSE-SU-2020:2629-1 Security update for shim

This update for shim fixes the following issues: This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...

SUSE-SU-2020:2626-1 Security update for shim

This update for shim fixes the following issues: - Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...

EulerOS Virtualization for ARM 64 3.0.2.0 : edk2 (EulerOS-SA-2020-1988)

According to the versions of the edk2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI Firmware Security Fixes:No description is available for this CVE.CVE-2019-14586No...

Dell Inspiron 7352 BIOS Boot Service Override Vulnerability

Dell Inspiron 7352 BIOS is a system update driver for Dell Dell. Dell Inspiron 7352 BIOS versions prior to A12 are vulnerable to a UEFI BIOS boot service override vulnerability, which could allow an attacker to override the EFIBOOTservice structure to execute arbitrary code in System Management...

Dell Inspiron 7347 BIOS Boot Service Override Vulnerability

Dell Inspiron 7347 BIOS is a system update driver for Dell Dell. Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS boot service override vulnerability that allows an attacker to override the EFIBOOTservice structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5379

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5376

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5379

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5379

Dell Inspiron 7352 BIOS versions prior to A12 are affected by a UEFI BIOS Boot Services overwrite vulnerability that allows a local attacker with memory access to overwrite EFI_BOOT_SERVICES and execute arbitrary code in System Management Mode (SMM). Dell lists a BIOS update to A12 as the mitigat...

CVE-2020-5376

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

This entry concerns Dell G7 17 7790 BIOS versions prior to 1.13.2 with a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory could overwrite the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM). The affected component...

CVE-2020-5376

CVE-2020-5376 affects Dell Inspiron 7347 BIOS prior to A13, where a UEFI BIOS Boot Services overwrite vulnerability allows a local attacker with memory access to overwrite EFI_BOOT_SERVICES and execute arbitrary code in System Management Mode (SMM). The issue is tied to BIOS versions before A13; ...