CVE-2019-14586
CVE-2019-14586
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access.
CVSS 8.0 · High · EPSS 0.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
extensible firmware interface development kit (edk ii)
- Versions
- EDK II: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 0~20200229.4c0f6e34-1
Update to 0~20200229.4c0f6e34-1
edk2 Ubuntu:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.1
Update to 0~20160408.ffea0a2c-2ubuntu0.1
edk2 Ubuntu:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.2
Update to 0~20180205.c0d9813c-2ubuntu0.2