CVE-2019-0161
CVE-2019-0161
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
CVSS 5.5 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
extensible firmware interface development kit (edk ii)
- Versions
- N/A: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 0~20180803.dd4cae4d-1
Update to 0~20180803.dd4cae4d-1
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 0~20180803.dd4cae4d-1
Update to 0~20180803.dd4cae4d-1
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 0~20180803.dd4cae4d-1
Update to 0~20180803.dd4cae4d-1
edk2 Ubuntu:Pro:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.2+esm3
Update to 0~20160408.ffea0a2c-2ubuntu0.2+esm3
edk2 Ubuntu:Pro:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.3+esm2
Update to 0~20180205.c0d9813c-2ubuntu0.3+esm2
Original sources
- https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00046.html
- https://access.redhat.com/errata/RHSA-2019:2125
- https://access.redhat.com/errata/RHSA-2019:2437
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/
- https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-0161