328 matches found
CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2018-12181
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access...
CVE-2018-12181
CVE-2018-12181 is confirmed in the provided connected documents as: a stack overflow in EDK II firmware when processing corrupted BMP data, which may allow a local attacker to cause denial of service or elevate privileges. Affected component: EDK II (firmware/EDK II BMP handling). Impact: local p...
CVE-2018-12181
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access...
CVE-2018-12180
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access...
CVE-2018-12180
CVE-2018-12180 refers to a Buffer Overflow in the BlockIo service of EDK II (RAM Disk). The vulnerability enables an unauthenticated attacker to potentially escalate privileges, disclose information, or cause denial of service via network access. Connected advisories (Ubuntu USN-4349-1, CentOS 8 ...
CVE-2018-12180
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access...
CVE-2018-12179
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...
CVE-2018-12179
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...
CVE-2018-12179
CVE-2018-12179 is an EDK II firmware configuration issue enabling escalation of privilege, information disclosure, or DoS via local access. Publicly referenced in multiple advisories (Astra Linux, Mageia MGASA-2021-0035, Amazon Linux 2 ALAS-2019-1290, Fedora update) alongside related CVEs (CVE-20...
CVE-2019-0160
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access...
CVE-2019-0160
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access...
CVE-2019-0160
CVE-2019-0160 is a buffer overflow in EDK II system firmware (OVMF) that could allow an unauthenticated user to escalate privileges and/or cause a denial of service via network access. The issue is cited across multiple advisories (e.g., Ubuntu USN-6920-1, Oracle Linux ELSA-2019-2125, CentOS/CESA...
CVE-2018-12178
CVE-2018-12178 is a buffer overflow in the EDK II network stack that could allow a remote attacker to escalate privileges or cause a denial of service via network input. Public advisories reference this CVE among multiple EDK II issues affecting Linux distributions (e.g., Ubuntu USN-4349-1 for 16...
CVE-2018-12178
Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network...
CVE-2018-12178
Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network...
CVE-2018-12182
Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...
CVE-2018-12182
CVE-2018-12182 affects the EDK II firmware/EDK II SMM subsystem across multiple vendor advisories. The root cause is an insufficient memory write check in the SMM service, which an authenticated local attacker could exploit to escalate privileges, disclose information, or cause denial of service....
CVE-2018-12182
Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...