ALT-PU-2020-1971-1
Package edk2-tools updated to version 20200229-alt1 for branch sisyphus in task 251783.
Closed vulnerabilities
BDU:2020-04779
Уязвимость микропрограммного обеспечения BIOS процессоров Intel, связанная с ошибками управления привилегиями, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2019-14558
Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
- [debian-lts-announce] 20210429 [SECURITY] [DLA 2645-1] edk2 security update
- [debian-lts-announce] 20210429 [SECURITY] [DLA 2645-1] edk2 security update
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
Modified: 2024-11-21
CVE-2019-14559
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.
Modified: 2024-11-21
CVE-2019-14563
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
Modified: 2024-11-21
CVE-2019-14575
Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
Modified: 2024-11-21
CVE-2019-14586
Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access.
Modified: 2024-11-21
CVE-2019-14587
Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.