CVE-2019-14575
CVE-2019-14575
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 7.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
extensible firmware interface development kit (edk ii)
- Versions
- EDK II: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Ubuntu:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.1
Update to 0~20160408.ffea0a2c-2ubuntu0.1
edk2 Ubuntu:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.2
Update to 0~20180205.c0d9813c-2ubuntu0.2