Red Hat Security AdvisoryRHSA-2019:3338
edk2 security, bug fix, and enhancement update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) edk2-20190308git89910a39dcfd-6.el8, edk2-aarch64-20190308git89910a39dcfd-6.el8, edk2-ovmf-20190308git89910a39dcfd-6.el8
Fixes 3 records
Priority MEDIUM 45
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01338 · Published 2019-03-27 · Fixed CWE-120
Priority LOW 27
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.
CVSS 3.0MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00425 · Published 2019-03-27 · Fixed CWE-787
Priority LOW 25
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00395 · Published 2019-03-27 · Fixed CWE-787
