1. CVE-Search
  2. CVE-2021-38578
ID CVE-2021-38578
Summary Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
References
Vulnerable Configurations
  • cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:2017-11-07:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:2017-11-07:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:2020-10-21:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:2020-10-21:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202102:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202102:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202105:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202105:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:rc0:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:rc0:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202111:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202111:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202111:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202111:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202202:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202202:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202202:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202202:rc1:*:*:*:*:*:*
  • cpe:2.3:o:insyde:kernel:5.0:*:*:*:*:*:*:*
    cpe:2.3:o:insyde:kernel:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:insyde:kernel:5.2:*:*:*:*:*:*:*
    cpe:2.3:o:insyde:kernel:5.2:*:*:*:*:*:*:*
  • cpe:2.3:o:insyde:kernel:5.3:*:*:*:*:*:*:*
    cpe:2.3:o:insyde:kernel:5.3:*:*:*:*:*:*:*
  • cpe:2.3:o:insyde:kernel:5.4:*:*:*:*:*:*:*
    cpe:2.3:o:insyde:kernel:5.4:*:*:*:*:*:*:*
  • cpe:2.3:o:insyde:kernel:5.5:*:*:*:*:*:*:*
    cpe:2.3:o:insyde:kernel:5.5:*:*:*:*:*:*:*
  • cpe:2.3:o:insyde:kernel:5.1:*:*:*:*:*:*:*
    cpe:2.3:o:insyde:kernel:5.1:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 02-08-2023 - 17:24)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
Last major update 02-08-2023 - 17:24
Published 03-03-2022 - 22:15
Last modified 02-08-2023 - 17:24
Back to Top