Red Hat Security Advisory: ovmf security and enhancement update

Fixed packages 2

Vulnerabilities 10

• High 8.7
  CVE-2019-0160

  Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privil…

  edk2 edk2 Debian Ubuntu
  Mar 27, 2019
• Unscored —
  CVE-2017-5731

  Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escal…

  edk2 Ubuntu
  Oct 28, 2019
• Unscored —
  CVE-2017-5732 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…

  Oct 28, 2019
• Unscored —
  CVE-2017-5733 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…

  Oct 28, 2019
• Unscored —
  CVE-2017-5734 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  Oct 28, 2019
• Unscored —
  CVE-2017-5735 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…

  Oct 28, 2019
• Unscored —
  CVE-2018-12181

  Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or eleva…

  Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 edk2 Debian Ubuntu
  Mar 27, 2019
• Unscored —
  CVE-2018-3613

  Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentiall…

  Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 Ubuntu
  Mar 27, 2019
• Unscored —
  CVE-2018-5407 Public exploit

  Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

  openssl openssl openssl openssl1.0 Debian Ubuntu Alpine
  Nov 15, 2018
• Unscored —
  CVE-2019-0161

  Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local a…

  Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 edk2 Debian Ubuntu
  Mar 27, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641442
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641446
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641450
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641458
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641465
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1645695
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1686783
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1691640
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1694065
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2125.json
• report
  https://access.redhat.com/security/cve/CVE-2017-5731
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5731
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5731
• article
  https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii-tianocompress-bounds-checking-issues.html
• report
  https://access.redhat.com/security/cve/CVE-2017-5732
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5732
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5732
• report
  https://access.redhat.com/security/cve/CVE-2017-5733
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5733
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5733
• report
  https://access.redhat.com/security/cve/CVE-2017-5734
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5734
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5734
• report
  https://access.redhat.com/security/cve/CVE-2017-5735
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5735
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5735
• report
  https://access.redhat.com/security/cve/CVE-2018-3613
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-3613
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-3613
• article
  https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii-authenticated-variable-bypass.html
• report
  https://access.redhat.com/security/cve/CVE-2018-5407
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5407
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5407
• article
  https://github.com/bbbrumley/portsmash
• article
  https://www.openssl.org/news/secadv/20181112.txt
• report
  https://access.redhat.com/security/cve/CVE-2018-12181