2416 matches found
Moderate: Red Hat Security Advisory: edk2 security update
An update for edk2 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
CVE-2024-39707
Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...
CVE-2024-39707
Insyde IHISI function 0x49 can restore the factory defaults of certain UEFI variables without authentication, enabling a potential roll-back attack on specific platforms. Affected stack: Insyde IHISI (on affected platforms) with kernel versions prior to 5.2/05.29.19, prior to 5.3/05.38.19, prior ...
PT-2024-28644 · Insyde · Insyde Ihisi
Name of the Vulnerable Software and Affected Versions: Insyde IHISI versions prior to kernel 5.2 version 05.29.19 Insyde IHISI versions prior to kernel 5.3 version 05.38.19 Insyde IHISI versions prior to kernel 5.4 version 05.46.19 Insyde IHISI versions prior to kernel 5.5 version 05.54.19 Insyde...
CVE-2024-39707
Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...
CVE-2024-40885
Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-41167
Improper input validation in UEFI firmware in some IntelR Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-41167
Improper input validation in UEFI firmware in some IntelR Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-39609
Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-39285
Improper access control in UEFI firmware in some IntelR Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-31158
Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-25565
Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...
CVE-2024-39285
Improper access control in UEFI firmware in some IntelR Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-39285
CVE-2024-39285 describes improper access control in UEFI firmware affecting Intel Server Board families such as M70KLP, M20NTP, M10JNP2SB, and S2600BP(S). The root cause is an access control weakness in the UEFI firmware that may allow a privileged local attacker to disclose sensitive information...
CVE-2024-39285
Improper access control in UEFI firmware in some IntelR Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-39609
Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-39609
Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-39609
CVE-2024-39609 concerns improper access control in the UEFI firmware of Intel Server Board M70KLP (and related Intel Server Boards). The Red Hat and Intel advisories identify the root cause as improper access control in UEFI, enabling a privileged user to potentially escalate privileges via local...
CVE-2024-39811
CVE-2024-39811 affects Intel Server M20NTP Family UEFI firmware. The root cause is improper input validation in the UEFI firmware, which may allow a privileged user to escalate privileges via local access. The vulnerability is documented with local attack vector and high-impact CVSS metrics (3.1:...