CVE-2018-12178 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Firmware Interface Development KIT
Severity
9.1CRITICALNVD
EPSS
0.4%
top 36.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 27
Latest updateMay 14
Description
Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HExploitability: 3.9 | Impact: 5.2
Affected Packages3 packages
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-85f7-wwh2-8hrc: Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via net↗2022-05-14
CVEList▶
CVE-2018-12178: Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via net↗2019-03-27
OSV▶
CVE-2018-12178: Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via net↗2019-03-27