[ Date Prev ][ Date Next ][ Thread Prev ][ Thread Next ][ Date Index ][ Thread Index ]

speaking of hardware CVEs

To : cve-editorial-board-list < cve-editorial-board-list@lists.mitre.org >
Subject : speaking of hardware CVEs
From : Kurt Seifried < kseifried@redhat.com >
Date : Fri, 10 Mar 2017 20:06:54 -0700
Authentication-results : spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=redhat.com;
Delivery-date : Mon Mar 13 08:04:08 2017
List-help : < mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST >
List-owner : < mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG >
List-subscribe : < mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG >
List-unsubscribe : < mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG >
Sender : < owner-cve-editorial-board-list@lists.mitre.org >
Spamdiagnosticmetadata : 6cdb8bfc89744bd8bfee511e3e65aa05
Spamdiagnosticoutput : 1:2

This timely article is out: https://www.cylance.com/en_us/blog/uefi-ransomware-full-disclosure-at-black-hat-asia.html seems like some UEFI implementations are lacking basic security checks/best practices, I would think failing to sue those things should be CVE worthy in the modern world.

Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com

Follow-Ups :
- Re: speaking of hardware CVEs
  - From: jericho <jericho@attrition.org>
- Re: speaking of hardware CVEs
  - From: Art Manion <amanion@cert.org>

Prev by Date: Re: Agenda for CVE Board Meeting March 8 (Wednesday)
Next by Date: Re: speaking of hardware CVEs
Previous by thread: Re: Agenda for CVE Board Meeting March 8 (Wednesday)
Next by thread: Re: speaking of hardware CVEs
Index(es):
- Date
- Thread

Page Last Updated or Reviewed: March 13, 2017

Site Map | Terms of Use | Privacy Policy | Contact Us | Follow CVE

Use of the CVE^™ List and the associated references from this website are subject to the terms of use . CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2021, The MITRE Corporation . CVE is a registered trademark and the CVE logo is a trademark of The MITRE Corporation.