Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2019:3338
HistoryNov 05, 2019 - 5:32 p.m.

(RHSA-2019:3338) Moderate: edk2 security, bug fix, and enhancement update

2019-11-0517:32:38
access.redhat.com
38

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

  • edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181)

  • edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media (CVE-2019-0160)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchedk2-aarch64< 20190308git89910a39dcfd-6.el8edk2-aarch64-20190308git89910a39dcfd-6.el8.noarch.rpm
RedHat8noarchedk2-ovmf< 20190308git89910a39dcfd-6.el8edk2-ovmf-20190308git89910a39dcfd-6.el8.noarch.rpm

Related

nessus 29
openvas 7
oraclelinux 5
suse 4
ubuntucve 3
prion 3
cve 3
veracode 3
redhatcve 3
debiancve 3
centos 1
amazon 2
redhat 2
altlinux 1
fedora 3
mageia 1
ubuntu 1
debian 1
osv 1
nessus
nessus
RHEL 8 : edk2 (RHSA-2019:3338)
2019-11-06 00:00:00
Oracle Linux 8 : edk2 (ELSA-2019-3338)
2023-09-07 00:00:00
openSUSE Security Update : ovmf (openSUSE-2019-1172)
2019-04-09 00:00:00
openvas
openvas
openSUSE: Security Advisory for ovmf (openSUSE-SU-2019:1172-1)
2019-04-09 00:00:00
openSUSE: Security Advisory for ovmf (openSUSE-SU-2019:1139-1)
2019-04-05 00:00:00
openSUSE: Security Advisory for ovmf (openSUSE-SU-2019:1425-1)
2019-05-22 00:00:00
oraclelinux
oraclelinux
edk2 security, bug fix, and enhancement update
2019-11-14 00:00:00
ovmf security and enhancement update
2019-08-13 00:00:00
edk2 security update
2019-09-13 00:00:00
suse
suse
Security update for ovmf (moderate)
2019-04-08 00:00:00
Security update for ovmf (moderate)
2019-04-05 00:00:00
Security update for ovmf (moderate)
2019-05-22 00:00:00
ubuntucve
ubuntucve
CVE-2018-12181
2019-03-27 00:00:00
CVE-2019-0161
2019-03-27 00:00:00
CVE-2019-0160
2019-03-27 00:00:00
prion
prion
Stack overflow
2019-03-27 20:29:00
Stack overflow
2019-03-27 20:29:00
Buffer overflow
2019-03-27 20:29:00
cve
cve
CVE-2018-12181
2019-03-27 20:29:00
CVE-2019-0161
2019-03-27 20:29:00
CVE-2019-0160
2019-03-27 20:29:00
veracode
veracode
Denial Of Service (DoS)
2019-08-08 00:07:51
Denial Of Service (DoS)
2019-08-08 00:07:51
Privilege Escalation
2019-08-08 00:07:51
redhatcve
redhatcve
CVE-2018-12181
2019-03-08 10:19:44
CVE-2019-0161
2019-03-29 13:50:15
CVE-2019-0160
2019-03-22 07:20:10
debiancve
debiancve
CVE-2018-12181
2019-03-27 20:29:00
CVE-2019-0161
2019-03-27 20:29:00
CVE-2019-0160
2019-03-27 20:29:00
centos
centos
OVMF security update
2019-08-30 03:50:09
amazon
amazon
Medium: edk2
2019-09-13 23:20:00
Important: edk2
2019-08-23 03:26:00
redhat
redhat
(RHSA-2019:2125) Moderate: ovmf security and enhancement update
2019-08-06 08:03:42
(RHSA-2019:2437) Important: Red Hat Virtualization security update
2019-08-12 10:51:59
altlinux
altlinux
Security fix for the ALT Linux 10 package edk2 version 20190308-alt1
2019-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: edk2-20190501stable-2.fc30
2019-08-15 18:10:13
[SECURITY] Fedora 29 Update: edk2-20190308stable-1.fc29
2019-04-03 03:31:40
[SECURITY] Fedora 30 Update: edk2-20190308stable-1.fc30
2019-03-31 00:05:59
mageia
mageia
Updated edk2 packages fix multiples security vulnerabilities
2021-01-17 19:07:01
ubuntu
ubuntu
EDK II vulnerabilities
2020-04-30 00:00:00
debian
debian
[SECURITY] [DLA 2645-1] edk2 security update
2021-04-29 20:03:01
osv
osv
edk2 - security update
2021-04-29 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON
Related for RHSA-2019:3338
nessus29openvas7oraclelinux5suse4ubuntucve3prion3cve3veracode3redhatcve3debiancve3centos1amazon2redhat2altlinux1fedora3mageia1ubuntu1debian1osv1