Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3126-1

Опубликовано: 03 нояб. 2020
Источник: suse-cvrf

Описание

Security update for ovmf

This update for ovmf fixes the following issues:

  • CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
  • CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc() (bsc#1163927).

Список пакетов

SUSE Linux Enterprise Server 12 SP2-BCL
ovmf-2015+git1462940744.321151f-19.15.1
ovmf-tools-2015+git1462940744.321151f-19.15.1
qemu-ovmf-x86_64-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server 12 SP2-LTSS
ovmf-2015+git1462940744.321151f-19.15.1
ovmf-tools-2015+git1462940744.321151f-19.15.1
qemu-ovmf-x86_64-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
ovmf-2015+git1462940744.321151f-19.15.1
ovmf-tools-2015+git1462940744.321151f-19.15.1
qemu-ovmf-x86_64-2015+git1462940744.321151f-19.15.1
SUSE OpenStack Cloud 7
ovmf-2015+git1462940744.321151f-19.15.1
ovmf-tools-2015+git1462940744.321151f-19.15.1
qemu-ovmf-x86_64-2015+git1462940744.321151f-19.15.1

Ссылки

Описание

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:ovmf-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server 12 SP2-BCL:ovmf-tools-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ovmf-x86_64-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server 12 SP2-LTSS:ovmf-2015+git1462940744.321151f-19.15.1
Ссылки

Описание

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:ovmf-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server 12 SP2-BCL:ovmf-tools-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ovmf-x86_64-2015+git1462940744.321151f-19.15.1
SUSE Linux Enterprise Server 12 SP2-LTSS:ovmf-2015+git1462940744.321151f-19.15.1
Ссылки