CVE-2019-14563

Опубликовано: 23 нояб. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

Ссылки

https://bugzilla.tianocore.org/show_bug.cgi?id=2001
Issue Tracking
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
Mailing List
Third Party Advisory
https://bugzilla.tianocore.org/show_bug.cgi?id=2001
Issue Tracking
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00054

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-681

Связанные уязвимости

CVE-2019-14563

CVSS3: 7.8

ubuntu

около 5 лет назад

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2019-14563

CVSS3: 6.4

redhat

около 6 лет назад

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2019-14563

CVSS3: 7.8

debian

около 5 лет назад

Integer truncation in EDK II may allow an authenticated user to potent ...

GHSA-5q44-mpwv-jf5p

github

больше 3 лет назад

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

ELSA-2020-1712

oracle-oval

почти 6 лет назад

ELSA-2020-1712: edk2 security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 17%

0.00054

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-681