Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wm2m-ch4m-97cr

Опубликовано: 23 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code.

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code.

EPSS

Процентиль: 19%
0.0006
Низкий

8.2 High

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 8.2
nvd
около 3 лет назад

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code.

EPSS

Процентиль: 19%
0.0006
Низкий

8.2 High

CVSS3

Дефекты

CWE-121
CWE-787