p PatchFirst

CVE-2017-5731

CVE-2017-5731

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access.

CVSS 7.8 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • tianocore

    Versions
    • before November 7, 2017: Affected

    No fix published

  • edk2 Ubuntu:Pro:16.04:LTS

    Versions
    • 0~20150106.5c2d456b-2
    • 0~20160104.c2a892d7-1
    • 0~20160408.ffea0a2c-2
    • 0~20160408.ffea0a2c-2ubuntu0.1
    • 0~20160408.ffea0a2c-2ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.2+esm1

    Update to 0~20160408.ffea0a2c-2ubuntu0.2+esm1

  • edk2 Ubuntu:Pro:18.04:LTS

    Versions
    • 0~20170911.5dfba97c-1
    • 0~20171010.234dbcef-1
    • 0~20171027.76fd5a66-1
    • 0~20171205.a9212288-1
    • 0~20180105.0bc94c74-1
    • 0~20180205.c0d9813c-1
    • 0~20180205.c0d9813c-2
    • 0~20180205.c0d9813c-2ubuntu0.1
    • 0~20180205.c0d9813c-2ubuntu0.2
    • 0~20180205.c0d9813c-2ubuntu0.3
    Affected ranges
    • ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.3+esm1

    Update to 0~20180205.c0d9813c-2ubuntu0.3+esm1

Original sources

Check your server →