CVE-2021-28211
CVE-2021-28211
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
CVSS 6.7 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
edk ii
- Versions
- edk2-stable202008: Affected
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2020.11-1
Update to 2020.11-1
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2020.11-1
Update to 2020.11-1
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2020.11-1
Update to 2020.11-1
edk2 Ubuntu:Pro:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.2+esm3
Update to 0~20160408.ffea0a2c-2ubuntu0.2+esm3
edk2 Ubuntu:Pro:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.3+esm2
Update to 0~20180205.c0d9813c-2ubuntu0.3+esm2
edk2 Ubuntu:20.04:LTS
- Versions
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- 0~20191122.bd85bf54-2ubuntu3.1
- Affected ranges
- ECOSYSTEM: < 0~20191122.bd85bf54-2ubuntu3.2
Update to 0~20191122.bd85bf54-2ubuntu3.2