CVE-2019-0160 — Classic Buffer Overflow in Fedora

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write10 documents8 sources
Severity
9.8CRITICALNVD
EPSS
0.3%
top 48.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Tianocore Edk2Fedoraproject FedoraOpensuse Leap+5 more
Timeline
PublishedMar 27
Latest updateJul 29

Description

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶Debiantianocore/edk2< 0~20181115.85588389-1+3
▶NVDopensuse/leap15.0

Also affects: Fedora 30, Enterprise Linux 8.0, 8.1, 8.2, 8.4

🔴Vulnerability Details

3
GHSA
GHSA-w3xf-7pcp-xvwv: Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service vi↗2022-05-13
▶
CVEList
CVE-2019-0160: Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service vi↗2019-03-27
▶
OSV
CVE-2019-0160: Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service vi↗2019-03-27
▶

📋Vendor Advisories

3
Ubuntu
EDK II vulnerabilities↗2024-07-29
▶
Red Hat
edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media↗2019-02-26
▶
Debian
CVE-2019-0160: edk2 - Buffer overflow in system firmware for EDK II may allow unauthenticated user to ...↗2019
▶

💬Community

3
Bugzilla
CVE-2019-0160 edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media [fedora-all]↗2019-03-22
▶
Bugzilla
CVE-2019-0160 edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media↗2019-03-22
▶
Bugzilla
CVE-2019-0160 edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media [epel-all]↗2019-03-22
▶
CVE-2019-0160 — Classic Buffer Overflow in Fedora | cvebase