Heap overflow

2021-06-1419:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.

CPENameOperatorVersion
poweredge_mx740c_firmwarelt2.11.2
poweredge_mx840c_firmwarelt2.11.2
poweredge_r640_firmwarelt2.11.2
poweredge_r740_firmwarelt2.11.2
poweredge_r740xd_firmwarelt2.11.2
poweredge_r840_firmwarelt2.11.2
poweredge_r940_firmwarelt2.11.2
poweredge_r940xa_firmwarelt2.11.2
poweredge_t640_firmwarelt2.11.2

Name	Operator	Version
poweredge_mx740c_firmware	lt	2.11.2
poweredge_mx840c_firmware	lt	2.11.2
poweredge_r640_firmware	lt	2.11.2
poweredge_r740_firmware	lt	2.11.2
poweredge_r740xd_firmware	lt	2.11.2
poweredge_r840_firmware	lt	2.11.2
poweredge_r940_firmware	lt	2.11.2
poweredge_r940xa_firmware	lt	2.11.2
poweredge_t640_firmware	lt	2.11.2

References

www.dell.com/support/kbdoc/000187958