ID CVE-2019-14563
Summary Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Vulnerable Configurations
  • cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 01-01-2022 - 18:11)
Impact:
Exploitability:
CWE CWE-681
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
bugzilla
id 1806359
title bochs-display cannot show graphic wihout driver attach
oval
OR
  • comment Red Hat Enterprise Linux must be installed
    oval oval:com.redhat.rhba:tst:20070304026
  • AND
    • comment Red Hat Enterprise Linux 8 is installed
      oval oval:com.redhat.rhba:tst:20193384074
    • OR
      • AND
        • comment edk2-aarch64 is earlier than 0:20190829git37eef91017ad-9.el8
          oval oval:com.redhat.rhsa:tst:20201712001
        • comment edk2-aarch64 is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20190968002
      • AND
        • comment edk2-ovmf is earlier than 0:20190829git37eef91017ad-9.el8
          oval oval:com.redhat.rhsa:tst:20201712003
        • comment edk2-ovmf is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20190968004
rhsa
id RHSA-2020:1712
released 2020-04-28
severity Moderate
title RHSA-2020:1712: edk2 security, bug fix, and enhancement update (Moderate)
rpms
  • edk2-aarch64-0:20190829git37eef91017ad-9.el8
  • edk2-ovmf-0:20190829git37eef91017ad-9.el8
refmap via4
misc https://bugzilla.tianocore.org/show_bug.cgi?id=2001
Last major update 01-01-2022 - 18:11
Published 23-11-2020 - 17:15
Last modified 01-01-2022 - 18:11
Back to Top