CVE-2019-14563
CVE-2019-14563
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 7.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
extensible firmware interface development kit (edk ii)
- Versions
- EDK II: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Ubuntu:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.1
Update to 0~20160408.ffea0a2c-2ubuntu0.1
edk2 Ubuntu:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.2
Update to 0~20180205.c0d9813c-2ubuntu0.2