CVE-2019-14584
CVE-2019-14584
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 7.8 · High · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
tianocore edk2
- Versions
- See reference: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2020.11-1
Update to 2020.11-1
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2020.11-1
Update to 2020.11-1
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2020.11-1
Update to 2020.11-1
edk2 Ubuntu:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.2
Update to 0~20160408.ffea0a2c-2ubuntu0.2
edk2 Ubuntu:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.3
Update to 0~20180205.c0d9813c-2ubuntu0.3
edk2 Ubuntu:20.04:LTS
- Versions
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- Affected ranges
- ECOSYSTEM: < 0~20191122.bd85bf54-2ubuntu3.1
Update to 0~20191122.bd85bf54-2ubuntu3.1