CVE-2019-6322

Summary: CVE-2019-6322 affects HP Workstation BIOS (UEFI firmware). The runtime BIOS code can be tampered if TPM is disabled, with impact on systems where TPM is enabled by default. Root cause (per HP): vulnerability in firmware allowing tampering of BIOS code under certain TPM configurations. Im...

CVE-2019-6321

HP has identified a security vulnerability with some versions of Workstation BIOS UEFI Firmware where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default...

CVE-2019-6321

HP CVE-2019-6321 affects some HP Workstation BIOS (UEFI firmware) where runtime BIOS code could be tampered if TPM is disabled. The HP PSRT note lists potential impacts as Escalation of Privilege, Denial of Service, Information Disclosure, Loss of Confidentiality/Integrity, with TPM-enabled by de...

Intel Fixes Critical, High-Severity Flaws Across Several Products

Intel has issued an updated advisory for more than 30 fixes addressing vulnerabilities across various products – including a critical flaw in Intel’s converged security and management engine CSME that could enable privilege-escalation. The bug CVE-2019-0153 exists in a subsystem of Intel CSME,...

Updated kernel-linus packages fixes security vulnerabilities

This kernel update provides the upstream 4.14.119 that adds the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. To complete the mitigatio...

Updated kernel packages fix security vulnerability

This kernel update provides the upstream 4.14.119 that adds the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. To complete the mitigatio...

Updated kernel-tmb packages fixes security vulnerabilities

This kernel update provides the upstream 4.14.119 that adds the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. To complete the mitigatio...

PT-2019-6290 · Intel +7 · Edk Ii +7

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: A heap overflow issue exists in the LzmaUefiDecompressGetInfo function. This issue can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of...

2019.1 QSR UEFI Advisory

Summary: Multiple potential security vulnerabilities in Intel® Unified Extensible Firmware Interface UEFI may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0119...

HPSBHF03617 rev. 4 - Intel UEFI System Firmware Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities in Intel firmware that might allow for escalation of privilege or denial of service...

HPESBHF03932 rev.2 - HPE Products using certain Intel UEFI Reference Code, Local Escalation of Privilege, Denial of Service Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL160 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL180...

RHEL 7 : redhat-virtualization-host (RHSA-2019:1116)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1116 advisory. OVMF Open Virtual Machine Firmware is an EDK II edk2 based project to enable UEFI support for Virtual Machines. The ovmf package contains a sample...

Important: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RHEL 8 : edk2 (RHSA-2019:0968)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0968 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...

HPSBHF03614 rev. 1 - Processor Registers Left Unlocked When TPM is Disabled

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure, Loss of Confidentiality, Loss of Integrity Source: HP, HP Product Security Response Team PSRT Reported By: HP Inc. VULNERABILITY SUMMARY HP has identified a security vulnerability with some versions of...

Security Bulletin: Denial of service vulnerability affects IBM Unified Extensible Firmware Interface (CVE-2019-6155)

Summary IBM has released the following Unified Extensible Firmware Interface UEFI fix for System x and BladeCenter systems in response to the following denial of service vulnerability. Vulnerability Details CVEID: CVE-2019-6155 DESCRIPTION: IBM System x and IBM BladeCenter systems are vulnerable ...

May 1, 2019—KB4501835 (OS Build 17763.439)

None None...

CentOS Update for OVMF-20180508-3.gitee3198e672e2.el7_ CESA-2019:0809 centos7

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : ovmf (CESA-2019:0809)

An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

OVMF security update

CentOS Errata and Security Advisory CESA-2019:0809 An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...