Intel® UEFI Firmware Advisory

Summary: A potential security vulnerability in UEFI firmware for some Intel® Xeon® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25565 Description: Insufficient control flow management i...

HPESBHF04741 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01085, UPLR2 - Intel UEFI Firmware Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Storage - Prior to 2.3008-09-2024 HPE StoreEasy 1470 Performance - Prior to 2.3008-09-2024 HPE StoreEasy 1570 Storage - Prior to 2.3008-09-2024 HPE StoreEasy...

Intel® Server Products UEFI Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Server Products UEFI firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-31158 Description: Improper...

2024.3 IPU - UEFI Firmware Advisory

Summary: Potential security vulnerabilities in UEFI firmware for some Intel® Processors may allow escalation of privilege, denial of service or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-4277...

ALSA-2024:9088 Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC CVE-2023-6129 openssl: Excessive time spent...

PT-2024-8807 · Intel · Intel Server M20Ntp Bios

Name of the Vulnerable Software and Affected Versions: IntelR Server M20NTP BIOS affected versions not specified Description: The issue is related to a use after free vulnerability in the UEFI firmware of some IntelR Server M20NTP BIOS, which may allow a privileged user to potentially enable...

PT-2024-8810 · Intel · Intel Server Board M70Klp

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M70KLP affected versions not specified Description: The issue is related to improper access control in the UEFI firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Th...

Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC CVE-2023-6129 openssl: Excessive time spent...

OPENSUSE-SU-2024:0364-1 Security update for virtualbox

This update for virtualbox fixes the following issues: Update to release 7.1.4: NAT: Fixed DHCP problems with certain guests when domain is empty VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels Linux Guest Additions: Introduce initial support for...

edk2 security update

An update is available for edk2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...

RLSA-2024:8935 Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: openssl: Possible denial of service in X.509 name checks CVE-2024-6119 For more details about the security issues, including...

CVE-2024-50141

In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFIMEMORYRUNTIME block for PRM handler and context PRMT needs to find the correct type of block to translate the PA-VA mapping for EFI runtime services. The issue arises because the PRMT is finding a block of type...

CVE-2024-50141 ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context

In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFIMEMORYRUNTIME block for PRM handler and context PRMT needs to find the correct type of block to translate the PA-VA mapping for EFI runtime services. The issue arises because the PRMT is finding a block of type...

Moderate: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

ALSA-2024:8935 Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: openssl: Possible denial of service in X.509 name checks CVE-2024-6119 For more details about the security issues, including...

Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: openssl: Possible denial of service in X.509 name checks CVE-2024-6119 For more details about the security issues, including...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to pointer swapping errors, allows attackers to escalate their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the UEFI Firmware component of Intel microprocessors lies in the lack of protection during the assignment of pointers; this allows attackers to exploit their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors lies in the lack of checks for the value of the pointer before it is reassigned. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to access control flaws, allows attackers to enhance their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors is related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the UEFI Firmware component of Intel microprocessor software arises from synchronization errors when using common resources, allowing attackers to escalate their privileges.

The vulnerability of the UEFI Firmware component of Intel microprocessors stems from synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to enhance their privileges...