CVE-2019-11098
CVE-2019-11098
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
CVSS 6.8 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
tianocore
- Versions
- See references: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2020.11-5
Update to 2020.11-5
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2020.11-5
Update to 2020.11-5
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2020.11-5
Update to 2020.11-5
edk2 Ubuntu:Pro:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- 0~20160408.ffea0a2c-2ubuntu0.2+esm3
- 0~20160408.ffea0a2c-2ubuntu0.2+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
edk2 Ubuntu:Pro:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- 0~20180205.c0d9813c-2ubuntu0.3+esm2
- 0~20180205.c0d9813c-2ubuntu0.3+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
edk2 Ubuntu:20.04:LTS
- Versions
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- 0~20191122.bd85bf54-2ubuntu3.1
- 0~20191122.bd85bf54-2ubuntu3.2
- Affected ranges
- ECOSYSTEM: < 0~20191122.bd85bf54-2ubuntu3.3
Update to 0~20191122.bd85bf54-2ubuntu3.3