CVE-2017-5731 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Edk2
Severity
7.8HIGHNVD
EPSS
0.1%
top 69.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 28
Latest updateJul 29
Description
Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages2 packages
Patches
🔴Vulnerability Details
3CVEList▶
CVE-2017-5731: Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local ac↗2019-10-28
OSV▶
CVE-2017-5731: Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local ac↗2019-10-28
📋Vendor Advisories
3💬Community
3Bugzilla▶
CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [fedora-all]↗2018-10-22
Bugzilla▶
CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [epel-all]↗2018-10-22
Bugzilla▶
CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c↗2018-10-22