CVE-2018-12181
Published: March 27, 2019Last modified: November 9, 2023
Description
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 6 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | HIGH |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | NONE |
| Integrity impact | HIGH |
| Availability impact | HIGH |
| Vector | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | edk2 | Not affected (0.0.202208-r0) |
| Stream | edk2 | Not affected (0.0.202302-r0) |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00030.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00048.html
- https://access.redhat.com/errata/RHSA-2019:2125
- https://access.redhat.com/errata/RHSA-2019:3338
- https://edk2-docs.gitbooks.io/security-advisory/content/stack-overflow-on-corrupted-bmp.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ABTDKZK2G5XP6JCO3HXMPOA2NRTIYDZ/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
- https://usn.ubuntu.com/4349-1/