TI-2019-00140 Aliases CVE-2019-0161 GHSA-jf2h-frpc-5873

Out-of-bounds write in TianoCore Extensible Firmware Interface Development Kit

LOW 25CWE-787Published 2019-03-27 · Updated 2024-08-04

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.

Why it matters now

EPSS 0.00395 33rd percentileScored 2026-11-07

Fix Fixed Red Hat: 3 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
TianoCore	Extensible Firmware Interface Development Kit (EDK II)	N/A	—	No fix listed	CNA

Extensible Firmware Interface Development Kit (EDK II) VendorTianoCore Affected N/A Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:tianocore:edk_ii:-:::::::*	not specified by NVD	Vulnerable	TianoCore

cpe:2.3:a:tianocore:edk_ii:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TianoCore

Remediation

Red Hat 3 advisories

RHSA-2019:3338 Released 2019-11-05 · Red Hat rating Moderate
edk2 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 8) edk2-20190308git89910a39dcfd-6.el8, edk2-aarch64-20190308git89910a39dcfd-6.el8, edk2-ovmf-20190308git89910a39dcfd-6.el8
RHSA-2019:2437 Released 2019-08-12 · Red Hat rating Important
Red Hat Virtualization security update
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) imgbased-1.1.9-0.1.el7ev, ovirt-node-ng-4.3.5-0.20190717.0.el7ev, ovirt-node-ng-nodectl-4.3.5-0.20190717.0.el7ev +4
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.5-20190722.0.el7_7, redhat-virtualization-host-image-update-4.3.5-20190722.0.el7_7
RHSA-2019:2125 Released 2019-08-06 · Red Hat rating Moderate
ovmf security and enhancement update
- Red Hat Enterprise Linux Server (v. 7) OVMF-20180508-6.gitee3198e672e2.el7, ovmf-20180508-6.gitee3198e672e2.el7

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2019-03-27
Extensible Firmware Interface Development Kit (EDK II) — FEDORA-2019-d47a9d4b8b
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2018-08728 Improper configuration in system firmware for EDK II may allow unauthenticated user to…Priority LOW 34
- TI-2018-08732 Out-of-bounds write in TianoCore Extensible Firmware Interface Development KitPriority LOW 31
- TI-2018-08731 Insufficient memory write check in SMM service for EDK II may allow an authenticated user…Priority LOW 30
Show all 4 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
RHEL 7-based RHEV-H for RHEV 4 (build requirements)	Fixed	RHSA-2019:2437
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2019:3338
Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2019:2125
Red Hat Virtualization 4 Hypervisor for RHEL 7	Fixed	RHSA-2019:2437

Timeline

2026-10-02 Threatist record created from CVE-2019-0161
2026-10-03 Alias added: GHSA-jf2h-frpc-5873

References

Patch 1

https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html

Advisory 5

Other 1

[debian-lts-announce] 20210429 [SECURITY] [DLA 2645-1] edk2 security update

TI-2019-00139 Buffer overflow in Extensible Firmware Interface Development Kit CVSS 3.1CRITICAL 9.8
TI-2018-08727 Memory corruption in TianoCore Extensible Firmware Interface Development Kit CVSS 3.0CRITICAL 9.1
TI-2018-08729 Out-of-bounds write in TianoCore Extensible Firmware Interface Development Kit CVSS 3.0HIGH 8.8
TI-2021-09442 BootPerformanceTable pointer is read from an NVRAM variable in PEI. CVSS 3.1HIGH 7.8
TI-2018-08728 Improper configuration in system firmware for EDK II may allow unauthenticated user to… CVSS 3.0HIGH 7.8
TI-2018-02649 Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an… CVSS 3.0HIGH 7.8

See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences