https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:56:56 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:2487 <p><strong>Affected:</strong> AlmaLinux:9: fwupd, AlmaLinux:9: fwupd-devel, AlmaLinux:9: fwupd-plugin-flashrom</p> <p>The fwupd packages provide a service that allows session software to update device firmware.</p> <p>Security Fix(es):</p> <p>* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34301) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34302) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: fwupd, AlmaLinux:9: fwupd-devel, AlmaLinux:9: fwupd-plugin-flashrom</p> <p>The fwupd packages provide a service that allows session software to update device firmware.</p> <p>Security Fix(es):</p> <p>* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34301) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34302) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:2487 https://cve.radiocsirt.org/vuln/bdu:2022-04955 bdu:2022-04955 https://cve.radiocsirt.org/vuln/bdu:2022-04955 https://cve.radiocsirt.org/vuln/certfr-2022-avi-729 certfr-2022-avi-729 https://cve.radiocsirt.org/vuln/certfr-2022-avi-729 https://cve.radiocsirt.org/vuln/euvd-2026-17832 EUVD-2026-17832 https://cve.radiocsirt.org/vuln/euvd-2026-17832 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34301 <p>A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.</p> <p>A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34301 https://cve.radiocsirt.org/vuln/ghsa-7j33-663j-fx7f <p>A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.</p> <p>A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.</p> https://cve.radiocsirt.org/vuln/ghsa-7j33-663j-fx7f https://cve.radiocsirt.org/vuln/gsd-2022-34301 gsd-2022-34301 https://cve.radiocsirt.org/vuln/gsd-2022-34301 https://cve.radiocsirt.org/vuln/rhsa-2023:2487 <p>fwupd: world readable password in /etc/fwupd/redfish.conf shim: 3rd party shim allow secure boot bypass shim: 3rd party shim allow secure boot bypass shim: 3rd party shim allow secure boot bypass</p> <p>fwupd: world readable password in /etc/fwupd/redfish.conf shim: 3rd party shim allow secure boot bypass shim: 3rd party shim allow secure boot bypass shim: 3rd party shim allow secure boot bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2023:2487 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185