Dell PowerEdge Server BIOS (heap-based buffer overflow): A high-privileged local attacker writes to memory it should

Impact

A high-privileged local attacker writes to memory it should not reach, with scope change - firmware-level memory corruption on the server platform.

Who can reach it

Local high-privilege access to the host.

What to do

Flash the fixed PowerEdge BIOS. A BIOS update is a cold reboot per node and cannot be done live - on a GPU fleet that means draining jobs and taking the box out of the scheduler, so batch it with other firmware work rather than doing a standalone pass.

References