Описание
Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| edk2 | fixed | 2020.11-1 | package | |
| edk2 | fixed | 0~20181115.85588389-3+deb10u3 | buster | package |
Примечания
https://bugzilla.tianocore.org/show_bug.cgi?id=1914
https://github.com/tianocore/edk2/commit/26442d11e620a9e81c019a24a4ff38441c64ba10
EPSS
Процентиль: 45%
0.00227
Низкий
Связанные уязвимости
CVSS3: 7.8
ubuntu
больше 4 лет назад
Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS3: 7.5
redhat
больше 5 лет назад
Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS3: 7.8
nvd
больше 4 лет назад
Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS
Процентиль: 45%
0.00227
Низкий