A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade edk2-ovmf | May 4, 2022 | Jun 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade edk2-toolsUpgrade edk2-tools-docUpgrade edk2-ovmfUpgrade edk2-debuginfoUpgrade edk2-aarch64 | Dec 20, 2024 | Jun 11, 2021 |
| Centos_linux | — | Upgrade edk2-ovmf | Jun 30, 2021 | Jun 11, 2021 |
| Debian | — | Upgrade edk2 | May 3, 2021 | May 3, 2021 |
| Oracle_linux | — | Upgrade edk2-ovmfUpgrade edk2-aarch64 | Jun 30, 2021 | Nov 19, 2020 |
| Redhat_linux | — | No solution existsUpgrade edk2-aarch64Upgrade edk2-ovmf | Jun 30, 2021 | Jun 11, 2021 |
| Rocky_linux | — | — | May 5, 2022 | Jun 11, 2021 |
| Suse | — | Upgrade ovmfUpgrade qemu-ovmf-ia32Upgrade ovmf-toolsUpgrade qemu-ovmf-x86_64-debugUpgrade qemu-ovmf-x86_64Upgrade qemu-uefi-aarch64 | Mar 31, 2021 | Mar 29, 2021 |
| Ubuntu | — | Upgrade qemu-efiUpgrade ovmfUpgrade qemu-efi (Ubuntu Pro)Upgrade qemu-efi-armUpgrade qemu-efi-aarch64 (Ubuntu Pro)Upgrade ovmf (Ubuntu Pro)Upgrade qemu-efi-aarch64Upgrade qemu-efi-arm (Ubuntu Pro) | Apr 21, 2021 | Mar 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub