p PatchFirst

CVE-2023-48733

CVE-2023-48733

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.

CVSS 6.7 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • ubuntu edk ii

    Versions
    • ≥ 0, < 2023.05-2ubuntu0.1: Affected (semver)

    Update to 2023.05-2ubuntu0.1

  • edk2 Debian:12

    Versions
    • 2022.11-6
    Affected ranges
    • ECOSYSTEM: < 2022.11-6+deb12u1

    Update to 2022.11-6+deb12u1

  • edk2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2023.11-7

    Update to 2023.11-7

  • edk2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2023.11-7

    Update to 2023.11-7

  • edk2 Ubuntu:Pro:16.04:LTS

    Versions
    • 0~20150106.5c2d456b-2
    • 0~20160104.c2a892d7-1
    • 0~20160408.ffea0a2c-2
    • 0~20160408.ffea0a2c-2ubuntu0.1
    • 0~20160408.ffea0a2c-2ubuntu0.2
    • 0~20160408.ffea0a2c-2ubuntu0.2+esm1
    • 0~20160408.ffea0a2c-2ubuntu0.2+esm3
    • 0~20160408.ffea0a2c-2ubuntu0.2+esm4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • edk2 Ubuntu:Pro:18.04:LTS

    Versions
    • 0~20170911.5dfba97c-1
    • 0~20171010.234dbcef-1
    • 0~20171027.76fd5a66-1
    • 0~20171205.a9212288-1
    • 0~20180105.0bc94c74-1
    • 0~20180205.c0d9813c-1
    • 0~20180205.c0d9813c-2
    • 0~20180205.c0d9813c-2ubuntu0.1
    • 0~20180205.c0d9813c-2ubuntu0.2
    • 0~20180205.c0d9813c-2ubuntu0.3
    • 0~20180205.c0d9813c-2ubuntu0.3+esm1
    • 0~20180205.c0d9813c-2ubuntu0.3+esm2
    • 0~20180205.c0d9813c-2ubuntu0.3+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • edk2 Ubuntu:20.04:LTS

    Versions
    • 0~20190606.20d2e5a1-2ubuntu1
    • 0~20190828.37eef910-3
    • 0~20190828.37eef910-4
    • 0~20191122.bd85bf54-1
    • 0~20191122.bd85bf54-1ubuntu1
    • 0~20191122.bd85bf54-2
    • 0~20191122.bd85bf54-2ubuntu1
    • 0~20191122.bd85bf54-2ubuntu2
    • 0~20191122.bd85bf54-2ubuntu3
    • 0~20191122.bd85bf54-2ubuntu3.1
    • 0~20191122.bd85bf54-2ubuntu3.2
    • 0~20191122.bd85bf54-2ubuntu3.3
    • 0~20191122.bd85bf54-2ubuntu3.4
    Affected ranges
    • ECOSYSTEM: < 0~20191122.bd85bf54-2ubuntu3.5

    Update to 0~20191122.bd85bf54-2ubuntu3.5

  • edk2 Ubuntu:22.04:LTS

    Versions
    • 2021.08~rc0-2
    • 2021.08-3
    • 2021.11~rc1-1
    • 2021.11-1
    • 2021.11-2
    • 2022.02~rc1-1
    • 2022.02~rc1-1ubuntu1
    • 2022.02-1
    • 2022.02-2
    • 2022.02-3
    • 2022.02-3ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: < 2022.02-3ubuntu0.22.04.2

    Update to 2022.02-3ubuntu0.22.04.2

Original sources

Check your server →