Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-12182

Опубликовано: 27 мар. 2019
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.6
CVSS3: 6.7

Описание

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

not-affected

0~20190606.20d2e5a1-2ubuntu1
disco

ignored

end of life
eoan

not-affected

0~20190606.20d2e5a1-2ubuntu1
esm-apps/bionic

released

0~20180205.c0d9813c-2ubuntu0.3+esm1
esm-apps/xenial

released

0~20160408.ffea0a2c-2ubuntu0.2+esm1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
esm-infra/focal

not-affected

0~20190606.20d2e5a1-2ubuntu1
focal

not-affected

0~20190606.20d2e5a1-2ubuntu1

Показывать по

EPSS

Процентиль: 28%
0.00097
Низкий

4.6 Medium

CVSS2

6.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
около 6 лет назад

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

CVSS3: 6.7
nvd
около 6 лет назад

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

CVSS3: 6.7
debian
около 6 лет назад

Insufficient memory write check in SMM service for EDK II may allow an ...

CVSS3: 6.7
github
около 3 лет назад

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

oracle-oval
больше 4 лет назад

ELSA-2020-5861: edk2 security update (IMPORTANT)

EPSS

Процентиль: 28%
0.00097
Низкий

4.6 Medium

CVSS2

6.7 Medium

CVSS3

Уязвимость CVE-2018-12182