Red Hat Security AdvisoryRHSA-2018:3090
ovmf security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) OVMF-20180508-3.gitee3198e672e2.el7, ovmf-20180508-3.gitee3198e672e2.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) AAVMF-20180508-3.gitee3198e672e2.el7, ovmf-20180508-3.gitee3198e672e2.el7
Fixes 1 record
Priority MEDIUM 47
Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.18596 · Published 2018-03-27 · Partial fix CWE-674
