CVE-2017-5735

CVE-2017-5735

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.

CVE-2017-5735

[REJECTED CVE] A heap-based buffer overflow issue was identified in EDK2 in the Decode() function of BaseUefiDecompressLib.c, TianoCompress.c and UEFI Specification. The issue arises from improper handling of data, which could allow an authenticated attacker to exploit it by supplying a crafted file. This could lead to privilege escalation.

openSUSE-SU-2018:4254-1

Security update for ovmf

openSUSE-SU-2018:4240-1

Security update for ovmf

SUSE-SU-2018:4207-1

Security update for ovmf