CVE-2019-14562

CVE-2019-14562 affects the edk2 firmware (DxeImageVerificationHandler) with an integer overflow that may cause a denial of service via local access. Affected components are firmware/EDK II implementations. The vulnerability is demonstrated across multiple advisories: Debian LTS/DLA-2645-1 fixes e...

CVE-2019-14562

Integer overflow in DxeImageVerificationHandler EDK II may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-14562

Integer overflow in DxeImageVerificationHandler EDK II may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-14562

Integer overflow in DxeImageVerificationHandler EDK II may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-14575: Undefined Security Weakness

Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14562: Integer Overflow or Wraparound

Integer overflow in DxeImageVerificationHandler EDK II may allow an authenticated user to potentially enable denial of service via local access...

Medium: edk2

Issue Overview: Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access. CVE-2019-14558 Memory leak in...

openSUSE Security Update : ovmf (openSUSE-2020-1535)

This update for ovmf fixes the following issues : - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Use openSUSE CA for the opensuse flavor bsc1175674 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descripti...

openSUSE Security Update : ovmf (openSUSE-2020-1525)

This update for ovmf fixes the following issues : - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Support more SCSI drivers PvScsi, MptScsi and LsiScsi. bsc1119454 - Enable LsiScsi explicitly since it's disabled by default This update was imported from the...

openSUSE: Security Advisory for ovmf (openSUSE-SU-2020:1535-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1525-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Support more SCSI drivers PvScsi, MptScsi and LsiScsi. bsc1119454 - Enable LsiScsi explicitly since it's disabled by default This update was imported from the...

PT-2020-9578

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: The issue is related to an integer overflow in the DxeImageVerificationHandler function, which may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-14562

Integer overflow in DxeImageVerificationHandler EDK II may allow an authenticated user to potentially enable denial of service via local access...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:0699-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. CVE-2019-14559: Fixed a...

openSUSE Security Update : ovmf (openSUSE-2020-314)

This update for ovmf fixes the following issues : Security issues fixed : - CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. - CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. - CVE-2019-14559:...

CVE-2019-14575

Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14575

Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2019-13752

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description A logic issue in the DxeImageVerificationHandler function may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations At the moment, there i...