Red Hat Security Advisory

RHSA-2021:4198

edk2 security, bug fix, and enhancement update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) edk2-20210527gite1999b264f1f-3.el8, edk2-aarch64-20210527gite1999b264f1f-3.el8, edk2-ovmf-20210527gite1999b264f1f-3.el8

Fixes 4 records

TI-2021-06204 CVE-2021-23840 · GHSA-qgm6-9472-pwq7

Integer overflow in CipherUpdate

HIGH 70

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.50732 Published 2021-02-16 Partial fix · 111.14.0 CWE-190

TI-2021-06205 CVE-2021-23841 · GHSA-84rm-qf37-fgc2

Null pointer deref in X509_issuer_and_serial_hash()

LOW 37

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0741 Published 2021-02-16 Partial fix · 111.14.0 CWE-476

TI-2021-09439 CVE-2021-28210 · GHSA-3q28-wqh2-j2f3

An unlimited recursion in DxeCore in EDK II.

LOW 34

An unlimited recursion in DxeCore in EDK II.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00399 Published 2021-06-11 Partial fix CWE-674

TI-2019-10858 CVE-2019-14584 · GHSA-r5j3-cc22-8xx9

NULL pointer dereference in Tianocore EDK2

LOW 34

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00325 Published 2021-06-03 Partial fix CWE-476