Red Hat Security Advisory

RHSA-2019:0809

ovmf security update

Released 2019-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) OVMF-20180508-3.gitee3198e672e2.el7_6.1, ovmf-20180508-3.gitee3198e672e2.el7_6.1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) AAVMF-20180508-3.gitee3198e672e2.el7_6.1, ovmf-20180508-3.gitee3198e672e2.el7_6.1

Fixes 1 record

TI-2018-08729 CVE-2018-12180 · GHSA-9ghw-h32x-5rfx

Out-of-bounds write in TianoCore Extensible Firmware Interface Development Kit

MEDIUM 42

Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02255 Published 2019-03-27 Fixed CWE-787