CVE-2017-5733

CVE-2017-5733

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.

CVE-2017-5733

[REJECTED CVE] A heap-based buffer overflow vulnerability exists in EDK II within the MakeTable() function of BaseUefiDecompressLib.c, TianoCompress.c, and the UEFI specification. An authenticated attacker could exploit this flaw by supplying a crafted file, potentially leading to privilege escalation.

openSUSE-SU-2018:4254-1

Security update for ovmf

openSUSE-SU-2018:4240-1

Security update for ovmf

SUSE-SU-2018:4207-1

Security update for ovmf