漏洞信息详情
XHCI for EDK2 缓冲区错误漏洞
漏洞简介
XHCI for EDK2是一款使用在EDK2中的USB3.0控制器支持。
XHCI for EDK2中存在栈溢出漏洞。本地攻击者可利用该漏洞造成拒绝服务。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,详情请关注厂商主页:
https://github.com/tianocore/edk2
参考网址
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00046.html
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/
来源:CONFIRM
链接:https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:2125
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00019.html
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:2437
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20191110-1.html
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:2125
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:2437
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20191204-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20191157-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/80350
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3075/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.1482
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/ovmf-buffer-overflow-via-UsbBusDxe-UsbBusPei-29170
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-0161
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/80682
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.2937/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/79934
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154008/Red-Hat-Security-Advisory-2019-2437-01.html
受影响实体
暂无
补丁
- XHCI for EDK2 缓冲区错误漏洞的修复措施<!--2019-3-27-->
还没有评论,来说两句吧...