Lucene search
+L

CVE-2014-4860

🗓️ 31 Jan 2020 15:08:16Reported by certccType 
cvelist
 cvelist
🔗 www.cve.org👁 55 Views

Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data

Related
Affected
Refs
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2014-4860
31 Jan 202015:08
–cve
debiancve
Debian CVE
CVE-2014-4860
31 Jan 202015:08
–debiancve
euvd
EUVD
EUVD-2014-4779
7 Oct 202500:30
–euvd
f5
F5 Networks
K15679: UEFI EDK2 Capsule Update vulnerabilities CVE-2014-4859 / CVE-2014-4860
21 Feb 202318:29
–f5
f5
F5 Networks
SOL15679 - UEFI EDK2 Capsule Update vulnerabilities CVE-2014-4859 / CVE-2014-4860
9 Oct 201400:00
–f5
lenovo
Lenovo
UEFI EDK2 Capsule Update Vulnerabilities
22 Jul 201600:00
–lenovo
nvd
NVD
CVE-2014-4860
31 Jan 202016:15
–nvd
openvas
OpenVAS
Apple Mac OS X Multiple Vulnerabilities-01 (HT205375)
15 May 201800:00
–openvas
osv_cve
osv_cve
CVE-2014-4860
31 Jan 202016:15
–osv_cve
prion
Prion
Integer overflow
31 Jan 202016:15
–prion
Rows per page
[
  {
    "product": "SCT3",
    "vendor": "Phoenix Technologies Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "before 5/23/2014"
      }
    ]
  },
  {
    "product": "BIOS",
    "vendor": "American Megatrends Incorporated (AMI)",
    "versions": [
      {
        "status": "affected",
        "version": "unknown"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation