CVE-2021-38575
CVE-2021-38575
This page contains facts from public vulnerability sources. Check the original advisory before updating.
NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
CVSS 8.1 · High · EPSS 2.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
edk ii
- Versions
- ≥ unspecified, ≤ edk2-stable202105: Affected (custom)
No fix published
edk2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2021.08-1
Update to 2021.08-1
edk2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2021.08-1
Update to 2021.08-1
edk2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2021.08-1
Update to 2021.08-1
edk2 Ubuntu:Pro:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: < 0~20160408.ffea0a2c-2ubuntu0.2+esm3
Update to 0~20160408.ffea0a2c-2ubuntu0.2+esm3
edk2 Ubuntu:Pro:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- Affected ranges
- ECOSYSTEM: < 0~20180205.c0d9813c-2ubuntu0.3+esm2
Update to 0~20180205.c0d9813c-2ubuntu0.3+esm2
edk2 Ubuntu:20.04:LTS
- Versions
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- 0~20191122.bd85bf54-2ubuntu3.1
- 0~20191122.bd85bf54-2ubuntu3.2
- Affected ranges
- ECOSYSTEM: < 0~20191122.bd85bf54-2ubuntu3.3
Update to 0~20191122.bd85bf54-2ubuntu3.3