CVE-2019-14586

CVE-2019-14586 is a use-after-free vulnerability in the EDK II firmware component. The connected documents confirm the issue affects the edk2 package within EulerOS/Oracle Linux environments, and that an authenticated user could potentially escalate privileges, disclose information, or cause deni...

CVE-2019-14586

Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access...

CVE-2019-14586

Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access...

CVE-2019-14575

Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14575

CVE-2019-14575 affects the EDK II firmware, describing a logic issue in DxeImageVerificationHandler() that may let an authenticated local user escalate privileges. The vulnerability is documented across multiple advisories (edk2 firmware references and related Nessus/Debian/DLA entries). The avai...

CVE-2019-14575

Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14563

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14563

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14563

CVE-2019-14563 is an EDK II vulnerability described as numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib that can allow an authenticated, local attacker to escalate privileges. The connected advisories (e.g., MiracleLinux AXSA:2020-915, Alibaba Cloud Linux ALINUX3-SA-2022:0098, Oracle Linux...

CVE-2019-14562

Integer overflow in DxeImageVerificationHandler EDK II may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-14562

CVE-2019-14562 affects the edk2 firmware (DxeImageVerificationHandler) with an integer overflow that may cause a denial of service via local access. Affected components are firmware/EDK II implementations. The vulnerability is demonstrated across multiple advisories: Debian LTS/DLA-2645-1 fixes e...

CVE-2019-14559

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-14559

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-14559

CVE-2019-14559 affects EDK II and is described as uncontrolled resource consumption that may allow an unauthenticated network-access DoS. Connected advisories confirm a memory leak in ArpOnFrameRcvdDpc (EDK II) contributing to the issue, with multiple distributions providing fixes: Debian LTS (ed...

CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

CVE-2019-14553

CVE-2019-14553 stems from an improper authentication issue in EDK II (EFI Development Kit II). The vulnerability is described as allowing a privileged user to potentially enable information disclosure via network access. Documented in multiple advisories (e.g., EulerOS, Alibaba Cloud Linux 3, Ora...

CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

edk2: memory leak in ArpOnFrameRcvdDpc

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

[SECURITY] Fedora 33 Update: edk2-20200801stable-1.fc33

EDK II is a development code base for creating UEFI drivers, applications and firmware images...

Huawei EulerOS: Security Advisory for edk (EulerOS-SA-2020-1791)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...