PT-2019-8877 · Intel+1 · Edk Ii+1

Publicado 2019-03-27 · Atualizado 2024-07-29 · CVE-2018-12183

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EDK II (affected versions not specified)

Description A stack overflow issue in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure, and/or denial of service via local access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-12183

MGASA-2021-0035

USN-6920-1

Produtos afetados

Edk Ii

Ubuntu

Referências · 26

• https://github.com/tianocore/edk2/releases · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12183 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-12182 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2021-0035 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/A23OH3MXQU7WURSP4PC66EXMG6INYFH6 · Aviso do Fabricante
• https://usn.ubuntu.com/4349-1 · Nota
• https://edk2-docs.gitbooks.io/security-advisory/content/unlimited-fv-recursion.html · Correção
• https://ubuntu.com/security/CVE-2019-0160 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=25939 · Nota
• https://ubuntu.com/security/notices/USN-4684-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-3613 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-6920-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-12183 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-6920-1 · Aviso do Fabricante