2469 matches found
Oracle Linux 7 : ovmf (ELSA-2019-0809)
From Red Hat Security Advisory 2019:0809 : An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: ovmf security update
An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
EfiGuard - Disable PatchGuard And DSE At Boot Time
EfiGuard is a portable x64 UEFI bootkit that patches the Windows boot manager, boot loader and kernel at boot time in order to disable PatchGuard and Driver Signature Enforcement DSE. Features Currently supports all EFI-compatible versions of Windows x64 ever released, from Vista SP1 to Server...
[SECURITY] Fedora 29 Update: edk2-20190308stable-1.fc29
EDK II is a development code base for creating UEFI drivers, applications and firmware images...
[SECURITY] Fedora 30 Update: edk2-20190308stable-1.fc30
EDK II is a development code base for creating UEFI drivers, applications and firmware images...
ASUS Patches Live Update Bug That Allowed APT to Infect Thousands of PCs
ASUS has expedited a patch for a major bug impacting thousands of PCs that allowed an advanced persistent threat group to launch a supply-chain attack dubbed “Operation ShadowHammer.” The vulnerability targeted a range of new ASUS PCs with a backdoor injection technique tied to the PC-maker’s...
TianoCore EDK II BIOS Vulnerabilities - Lenovo Support US
No description provided...
TianoCore EDK II BIOS Vulnerabilities - US
Lenovo Security Advisory: LEN-22660 Potential Impact: Denial of service, privilege escalation Severity: Medium Scope of Impact: Industry-wide Summary Description: Lenovo was notified of multiple buffer validation and parsing vulnerabilities in TianoCore EDK II BIOS that could lead to denial of...
HPSBHF03604 rev. 2 - Intel Xeon® Platform Firmware Included Unsecure Handling of Certain UEFI Variables
Potential Security Impact Escalation of Privilege, Denial of Service. Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Insecure handling of UEFI variables in Intel® Xeon® Scalable processors, Intel® Xeon® Processor E5 v4 Family, Intel® Xeon® Processor E5...
Firmware Denial of Service - Lenovo Support US
No description provided...
Firmware Denial of Service - US
Lenovo Security Advisory: LEN-24816 Potential Impact: Denial of service Severity: Low Scope of Impact: Industry-wide Summary Description: Lenovo was notified by AMI of a vulnerability that can prevent firmware from booting when certain modifiable UEFI variables are intentionally corrupted during...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Unified Extensible Firmware Interface (UEFI) (CVE-2017-3735 CVE-2017-3736)
Summary IBM Unified Extensible Firmware Interface UEFI has addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary IBM Unified Extensible Firmware Interface UEFI has addressed the following vulnerabilities in OpenSSL. Vulnerability Details CVEID: CVE-2017-3735 Descriptio...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface (UEFI) (CVE-2015-0286 CVE-2015-0288 CVE-2015-0289 CVE-2015-0209 CVE-2015-0287)
Summary OpenSSL vulnerabilities were disclosed on March 19th, 2015 by the OpenSSL Project. OpenSSL is used by IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface UEFI. IBM System x, BladeCenter and Flex Systems UEFI have addressedthe applicable CVEs. Vulnerability...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface (UEFI) (CVE-2015-1789 CVE-2015-1790 CVE-2015-1792)
Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface. IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface UEFI have addressed the...
Security Bulletin: System x3850 X6/x3950 X6 and IBM Flex System x880 X6 UEFI vulnerable to denial of service (CVE-2014-4768)
Summary IBM Unified Extensible Firmware Interface UEFI allows a privileged user to configure the system in a legacy boot mode would cause a temporary denial of service. Vulnerability Details Summary IBM Unified Extensible Firmware Interface UEFI allows a privileged user to configure the system in...
Security Bulletin: Vulnerabilities in OpenSSL affect System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface (UEFI) (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275)
Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. OpenSSL is used by IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface UEFI. IBM System x, BladeCenter and Flex Systems UEFI has addressed the applicable CVEs. Vulnerability...
Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)
Summary Speculative execution is a technique used by many modern processors to improve performance by predicting which instructions may be executed based on past execution history. An attacker with local user access may be able to utilize sequences of speculative execution to perform a cache timi...
System firmware Can Be Erased or Corrupted After Boot - Lenovo Support US
No description provided...
System x Secure Boot Vulnerability - US
Lenovo Security Advisory: LEN-20241 Potential Impact: Booting unauthenticated code Severity: High Scope of Impact: Lenovo-only CVE Identifier: CVE-2017-3775 Summary Description: Lenovo internal testing discovered some System x server BIOS/UEFI versions that, when Secure Boot mode is enabled by a...