GIGABYTE BRIX UEFI firmware fails to implement write protection and is not cryptographically signed

Overview GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 and GB-BXi7-5775 platforms, versions vF6 and vF2 respectively, fails to properly set the BIOSWE, BLE, SMMBWP, and PRx bits to enforce write protection. It also is not cryptographically signed. These issues may permit an attacker to write...

WikiLeaks Dark Matter Release Shows CIA Interdiction of iPhone Supply Chain

From the early days of the iPhone, the CIA has had an interest in compromising the flagship Apple mobile device, according to the latest WikiLeaks release of CIA documents. Today’s Vault 7 Dark Matter release shows an unsurprising interest from the intelligence agency in tracking iPhone users, as...

Platform Security Assessment Framework: ChipSec

Platform Security Assessment Framework CHIPSEC is a framework for analyzing security of PC platforms including hardware, system firmware including BIOS/UEFI and the configuration of platform components. It allows creating security test suite, security assessment tools for various low level...

SUSE-SU-2017:0475-1 Security update for susestudio

This update provides SUSE Studio Runner 1.3.14, which brings fixes for the following issues: - bsc968797: 11 SP3 appliance gets invalid distribution upgrade from SLMS. - bsc947225: Second build of appliance will not register to SLMS, wrong product name. - bsc983404: UEFI boot missing for SLE11 SP...

Configuring PVS for High Availability with UEFI Booting and PXE service

Provisioning server - cannot load balance or HA...

CVE-2016-8226

The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure...

Code injection

The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure...

CVE-2016-8226

CVE-2016-8226 affects Lenovo System X M5, M6, and X6 BIOS. The vulnerability allows an administrator to cause a denial of service by updating a UEFI data structure, which can prevent POST and boot. Descriptions in the Lenovo LEN-11306 advisory confirm a Lenovo-specific BIOS/POST impact and recomm...

CVE-2016-8226

The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure...

Security update for xen (important)

This updates xen to version 4.4.406 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable...

Maliciously crafted packet sent during PXE boot can cause system hang - bo

Lenovo Security Advisory: LEN-7908 Potential Impact: System hang during PXE boot recoverable on reboot Severity: Medium Scope of Impact: Industry-Wide Summary Description: An industry-wide BIOS vulnerability was identified by the UEFI Security Response team that has been addressed in the latest...

Maliciously crafted packet sent during PXE boot can cause system hang - Lenovo Support BO

No description provided...

Denial of service attack on Lenovo System X M5, M6, and X6 systems - us

Lenovo Security Advisory: LEN-11306 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8226 Summary Description: A vulnerability was identified in the BIOS of Lenovo System X M5, M6, and X6 systems. An attacker with administrative access...

Denial of service attack on Lenovo System X M5, M6, and X6 systems - Lenovo Support US

No description provided...

HPSBGN3552 rev.1 HP Secure Boot UEFI Update

Potential Security Impact Secure Boot Bypass VULNERABILITY SUMMARY HP UEFI update to support Microsoft's enhanced protection of Windows secure boot policies. RESOLUTION HP has provided firmware updates to address the vulnerability for HP PCs with UEFI Firmware. To acquire the firmware updates, go...

Fedora 25 : dbxtool (2016-0f013aee39)

This is the update to add blacklist items for CVE-2016-3320 Microsoft bootloaders. See https://support.microsoft.com/en-us/kb/3179577 for more details. Before applying, 'dbxtool -l' should show something around 14 entries in dbx on UEFI systems though possibly several fewer. After updating the...

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-142 Cumulative security update for Internet Explorer: November 8, 2016 MS16-140 Security updat...

MS16-140: Security update for boot manager: November 8, 2016

Resolves a vulnerability in Windows that could allow security feature bypass if a physically-present attacker installs an affected boot policy.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow a security feature bypass if a physically present...

Encryption software VeraCrypt audit reports published, discovered multiple high risk vulnerabilities attached report download-vulnerability warning-the black bar safety net

! In DuckDuckGo and VikingVPN funded by QuarksLab recent open-source encryption software VeraCrypt conducted a security audit. The audit found that the 8 high-risk vulnerabilities, and 1 0 more in the lower level of vulnerability. About VeraCrypt VeraCrypt is a very popular disk encryption softwa...

VeraCrypt Audit Reveals Critical Security Flaws — Update Now

After TrueCrypt mysteriously discontinued its service, VeraCrypt became the most popular open source disk encryption software used by activists, journalists, as well as privacy conscious people. First of all, there is no such thing as a perfect, bug-free software. Even the most rigorously tested...