CVE-2019-14553
CVE-2019-14553
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.
CVSS 4.9 · Medium · EPSS 1.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
extensible firmware interface development kit (edk ii)
- Versions
- EDK II: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 0~20190828.37eef910-4
Update to 0~20190828.37eef910-4
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 0~20190828.37eef910-4
Update to 0~20190828.37eef910-4
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 0~20190828.37eef910-4
Update to 0~20190828.37eef910-4
edk2 Ubuntu:Pro:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- 0~20160408.ffea0a2c-2ubuntu0.2+esm3
- 0~20160408.ffea0a2c-2ubuntu0.2+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
edk2 Ubuntu:Pro:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- 0~20180205.c0d9813c-2ubuntu0.3+esm2
- 0~20180205.c0d9813c-2ubuntu0.3+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published