Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Link | Resource |
---|---|
https://bugzilla.tianocore.org/show_bug.cgi?id=1608 | Issue Tracking |
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html | Mailing List Third Party Advisory |
Configurations
History
01 Jan 2022, 18:11
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html - Mailing List, Third Party Advisory |
Information
Published : 2020-11-23 17:15
Updated : 2024-02-04 21:23
NVD link : CVE-2019-14575
Mitre link : CVE-2019-14575
CVE.ORG link : CVE-2019-14575
JSON object : View
Products Affected
tianocore
- edk2
debian
- debian_linux
CWE