Описание
An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.
Ссылки
- Not Applicable
- Vendor Advisory
- Not Applicable
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 01.01.04.0016 (исключая)
cpe:2.3:a:insyde:insydecrpkg:*:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00049
Низкий
7.1 High
CVSS3
Дефекты
CWE-125
Связанные уязвимости
CVSS3: 7.1
github
больше 2 лет назад
An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.
EPSS
Процентиль: 15%
0.00049
Низкий
7.1 High
CVSS3
Дефекты
CWE-125