PT-2019-8877 · Intel+1 · Edk Ii+1

Published 2019-03-27 · Updated 2024-07-29 · CVE-2018-12183

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EDK II (affected versions not specified)

Description A stack overflow issue in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure, and/or denial of service via local access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-12183

MGASA-2021-0035

USN-6920-1

Affected Products

Edk Ii

Ubuntu

References · 26

• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12183 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12182 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0035 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/A23OH3MXQU7WURSP4PC66EXMG6INYFH6 · Vendor Advisory
• https://edk2-docs.gitbooks.io/security-advisory/content/unlimited-fv-recursion.html · Patch
• https://ubuntu.com/security/CVE-2019-0160 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4684-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-3613 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6920-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-12183 · Security Note
• https://ubuntu.com/security/notices/USN-6920-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12183 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5731 · Vendor Advisory