Lenovo issues firmware updates after UEFI vulnerabilities disclosed
Security researchers have spotted fresh flaws in Lenovo laptops just months after the vendor patched a bunch of its products.
The PC maker has now fixed the trio of bugs, which were flagged up by ESET this week. More than 70 models were impacted by this latest issue, including a number of ThinkBook devices. The vulnerabilities reported were buffer overflows in the UEFI firmware.the ESET Research team,"can be exploited to achieve arbitrary code execution in the early phases of the platform boot, possibly allowing the attackers to hijack the OS execution flow and disable some important security features.
"It's a typical UEFI 'double GetVariable' vulnerability," the team added, before giving a hat tip to efiXplorer.on the matter this week: the CVE identifiers are CVE-2022-1890, CVE-2022-1891, CVE-2022-1892. All are related to buffer overflows and carry the risk that an attacker with local privileges will be able to execute arbitrary code. Their severity was rated as medium.
Belgique Dernières Nouvelles, Belgique Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
AWS squashes authentication bugs in Kubernetes serviceAmazon squashes years-old authentication bugs in AWS Kubernetes service
Lire la suite »
Trio charged with conspiracy over stolen Hotel California and other Eagles manuscripts worth more than $1mThe three men allegedly attempted to sell the Eagles' Hotel California manuscripts and lied to auction houses, potential buyers and law enforcement about their origin in a 'years-long campaign' to prevent founding member Don Henley from recovering them.
Lire la suite »
Nils-Udo and Ruinart’s ode to biodiversity in rural ReimsFor the latest project in Ruinart’s 300th-anniversary countdown, land art pioneer Nils-Udo has unveiled HABITATS, a trio of ephemeral, organic nests that dapple the champagne maison’s Reims vin...
Lire la suite »
Turkey teeth: Are cut-price reality TV teeth worth it?UK dentists are treating patients with complications after travelling abroad for cheap crowns.
Lire la suite »
Fall Guys Head Turner achievement now unlockable for all playersFall Guys developer Mediatonic has commented on the partly discontinued/unobtainable Head Turner achievement, saying it has plans to make the achievement easier to unlock.
Lire la suite »
Microsoft's Patch Tuesday fixes one bug under active exploitMicrosoft's July Patch Tuesday fixes actively exploited bug
Lire la suite »