CVE-2019-14562
CVE-2019-14562
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.
CVSS 5.5 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
extensible firmware interface development kit (edk ii)
- Versions
- EDK II: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2020.05-4
Update to 2020.05-4
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2020.05-4
Update to 2020.05-4
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2020.05-4
Update to 2020.05-4
edk2 Ubuntu:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.2
Update to 0~20160408.ffea0a2c-2ubuntu0.2
edk2 Ubuntu:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.3
Update to 0~20180205.c0d9813c-2ubuntu0.3
edk2 Ubuntu:20.04:LTS
- Versions
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- Affected ranges
- ECOSYSTEM: < 0~20191122.bd85bf54-2ubuntu3.1
Update to 0~20191122.bd85bf54-2ubuntu3.1