CVE-2017-5731

🗓️ 28 Oct 2019 14:47:35Reported by intelType

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access

Reporter	Title	Published	Views	Family All 72
Tenable Nessus	Amazon Linux 2 : edk2 (ALAS-2019-1273)	28 Aug 201900:00	–	nessus
Tenable Nessus	CentOS 7 : ovmf (CESA-2019:2125)	30 Aug 201900:00	–	nessus
Tenable Nessus	Fedora 30 : edk2 (2019-3b96bb5186)	2 May 201900:00	–	nessus
Tenable Nessus	Fedora 29 : edk2 (2019-bff1cbaba3)	29 Aug 202500:00	–	nessus
Tenable Nessus	MiracleLinux 7 : ovmf-20180508-6.gitee3198e672e2.el7 (AXSA:2019-4031:02)	16 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : ovmf Multiple Vulnerabilities (NS-SA-2019-0218)	2 Dec 201900:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2019-0239)	31 Dec 201900:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2021-0180)	27 Oct 202100:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : ovmf Multiple Vulnerabilities (NS-SA-2022-0009)	9 May 202200:00	–	nessus
Tenable Nessus	openSUSE Security Update : ovmf (openSUSE-2018-1590)	24 Dec 201800:00	–	nessus

NVD

Node

tianocore edk2Range<2017-11-07

[
  {
    "product": "Tianocore",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before November 7, 2017"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.tianocore.org/show_bug.cgi

21 Nov 2024 03:28Current

7.6High risk

Vulners AI Score7.6

CVSS 24.6

CVSS 3.17.8

EPSS0.00129

CWE-119