NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade edk2-ovmf | Sep 20, 2021 | Aug 10, 2021 |
| Debian | — | Upgrade edk2 | Jul 30, 2024 | Dec 1, 2021 |
| Oracle_linux | — | Upgrade edk2-ovmfUpgrade edk2-aarch64 | Jul 22, 2024 | Jun 8, 2021 |
| Redhat_linux | — | No solution existsUpgrade edk2-aarch64Upgrade edk2-ovmf | Sep 20, 2021 | Aug 10, 2021 |
| Rocky_linux | — | Upgrade edk2-ovmfUpgrade edk2-aarch64Upgrade edk2 | May 5, 2022 | Dec 1, 2021 |
| Ubuntu | — | Upgrade ovmf (Ubuntu Pro)Upgrade ovmfUpgrade ovmf-ia32Upgrade qemu-efi-aarch64 (Ubuntu Pro)Upgrade qemu-efi (Ubuntu Pro)Upgrade qemu-efi-aarch64Upgrade qemu-efi-armUpgrade qemu-efiUpgrade qemu-efi-arm (Ubuntu Pro) | Sep 24, 2021 | Sep 23, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub