|
|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
speaking of hardware CVEs
- To: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
- Subject: speaking of hardware CVEs
- From: Kurt Seifried <kseifried@redhat.com>
- Date: Fri, 10 Mar 2017 20:06:54 -0700
- Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=redhat.com;
- Delivery-date: Mon Mar 13 08:04:08 2017
- List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
- List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
- List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
- List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
- Sender: <owner-cve-editorial-board-list@lists.mitre.org>
- Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
- Spamdiagnosticoutput: 1:2
This timely article is out: https://www.cylance.com/en_us/blog/uefi-ransomware-full-disclosure-at-black-hat-asia.html seems like some UEFI implementations are lacking basic security checks/best practices, I would think failing to sue those things should be CVE worthy in the modern world.
--
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com
- Follow-Ups:
- Re: speaking of hardware CVEs
- From: jericho <jericho@attrition.org>
- Re: speaking of hardware CVEs
- From: Art Manion <amanion@cert.org>
- Re: speaking of hardware CVEs
- Prev by Date: Re: Agenda for CVE Board Meeting March 8 (Wednesday)
- Next by Date: Re: speaking of hardware CVEs
- Previous by thread: Re: Agenda for CVE Board Meeting March 8 (Wednesday)
- Next by thread: Re: speaking of hardware CVEs
- Index(es):