Red Hat Security Advisory: edk2 security, bug fix, and enhancement update

Fixed packages 3

Vulnerabilities 3

• High 8.7
  CVE-2019-0160

  Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privil…

  edk2 edk2 Debian Ubuntu
  Mar 27, 2019
• Unscored —
  CVE-2018-12181

  Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or eleva…

  Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 edk2 Debian Ubuntu
  Mar 27, 2019
• Unscored —
  CVE-2019-0161

  Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local a…

  Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 edk2 Debian Ubuntu
  Mar 27, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666941
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1686783
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1687731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1691640
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1693205
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1714446
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3338.json
• report
  https://access.redhat.com/security/cve/CVE-2018-12181
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-12181
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-12181
• report
  https://access.redhat.com/security/cve/CVE-2019-0160
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0160
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0160
• report
  https://access.redhat.com/security/cve/CVE-2019-0161
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1694065
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0161
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0161
• article
  https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html