StarlingX

Fix CVE-2019-0160

Bug #1849204 reported by Bruce Jones on 2019-10-21

This bug report is a duplicate of: Bug #1849205: CVE-2019-0160: OVMF: overflows with long file names and invalid UDF media. Edit Remove

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	StarlingX	Fix Released	High	Ghada Khalil

Bug Description

CVE-2019-0160
status : fixed
cvss2Score : 7.5
Attack Vector: N
Access Complexity : L
Autentication: N
Availability Impact :P
Affected packages:
['OVMF', 'openssl', 'openssl-libs']
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
https://nvd.nist.gov/vuln/detail/CVE-2019-0160

Tags:

CVE References

2019-0160

Revision history for this message

Ghada Khalil (gkhalil) wrote on 2019-10-22:

Appears to be opened in error - https://bugs.launchpad.net/starlingx/+bug/1849204 is reporting the same CVE vulnerability. Marking as a duplicate.

Revision history for this message

Ghada Khalil (gkhalil) wrote on 2019-10-22:

typo above. Duplicate of https://bugs.launchpad.net/starlingx/+bug/1849205

Changed in starlingx:
importance:	Undecided → High
status:	New → Triaged
tags:	added: stx.2.0 stx.3.0 stx.security
Changed in starlingx:
assignee:	nobody → Ghada Khalil (gkhalil)