CVE-2018-12179
CVE-2018-12179
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
CVSS 7.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
extensible firmware interface development kit (edk ii)
- Versions
- N/A: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 0~20190606.20d2e5a1-2
Update to 0~20190606.20d2e5a1-2
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 0~20190606.20d2e5a1-2
Update to 0~20190606.20d2e5a1-2
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 0~20190606.20d2e5a1-2
Update to 0~20190606.20d2e5a1-2
Original sources
- https://edk2-docs.gitbooks.io/security-advisory/content/opal-blocksid-setting-disabled-after-s3.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/
- https://nvd.nist.gov/vuln/detail/CVE-2018-12179