CVE-2024-40885

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-40885

CVE-2024-40885 concerns use-after-free in the UEFI firmware of Intel Server M20NTP BIOS. The vulnerability, exploitable via local access with high privileges, could enable privilege escalation. Intel’s advisories and related entries (Intel SA-01175 and vendor security pages) indicate affected Int...

CVE-2024-40885

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Improper input validation in UEFI firmware in some IntelR Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Summary: CVE-2024-41167 concerns improper input validation in the UEFI firmware of Intel Server Board M10JNP2SB Family, potentially allowing a locally privileged user to escalate privileges. The issue is documented within a broader Intel advisory tier that lists several related CVEs (e.g., CVE-20...

CVE-2024-31154

Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31154

Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31158

Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31158

CVE-2024-31158 affects Intel Server Board S2600BP Family (and related variants S2600BPBR) where improper input validation in UEFI firmware may allow a privileged local user to escalate privileges. The issue is rooted in the UEFI firmware handling on these Intel server boards, with Intel documenti...

CVE-2024-31158

Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-25565

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-25565

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-25565

CVE-2024-25565 involves insufficient control flow management in UEFI firmware on some Intel® Xeon® Processors, potentially allowing an authenticated local attacker to trigger denial of service. The Intel advisory Intel-SA-01085 documents affected generations (4th/5th Gen Intel® Xeon® Scalable Pro...

Moderate: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Intel® UEFI Firmware Advisory

Summary: A potential security vulnerability in UEFI firmware for some Intel® Xeon® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25565 Description: Insufficient control flow management i...

HPESBHF04741 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01085, UPLR2 - Intel UEFI Firmware Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Storage - Prior to 2.3008-09-2024 HPE StoreEasy 1470 Performance - Prior to 2.3008-09-2024 HPE StoreEasy 1570 Storage - Prior to 2.3008-09-2024 HPE StoreEasy...

ALSA-2024:9088 Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC CVE-2023-6129 openssl: Excessive time spent...

Intel® Server Products UEFI Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Server Products UEFI firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-31158 Description: Improper...

2024.3 IPU - UEFI Firmware Advisory

Summary: Potential security vulnerabilities in UEFI firmware for some Intel® Processors may allow escalation of privilege, denial of service or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-4277...

PT-2024-8810 · Intel · Intel Server Board M70Klp

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M70KLP affected versions not specified Description: The issue is related to improper access control in the UEFI firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Th...