CVE-2019-14575

Опубликовано: 23 нояб. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

Ссылки

https://bugzilla.tianocore.org/show_bug.cgi?id=1608
Issue Tracking
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
Mailing List
Third Party Advisory
https://bugzilla.tianocore.org/show_bug.cgi?id=1608
Issue Tracking
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.00061

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-14575

CVSS3: 7.8

ubuntu

около 5 лет назад

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2019-14575

CVSS3: 7.5

redhat

около 6 лет назад

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2019-14575

CVSS3: 7.8

debian

около 5 лет назад

Logic issue in DxeImageVerificationHandler() for EDK II may allow an a ...

GHSA-jg74-g2r7-p8mf

github

больше 3 лет назад

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

openSUSE-SU-2020:0314-1

suse-cvrf

почти 6 лет назад

Security update for ovmf

EPSS

Процентиль: 19%

0.00061

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo