CVE-2019-0160
Fixed in a distro release EPSS 1%CVSS 8.7
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
Products: tianocore edk_ii, opensuse leap, fedoraproject fedora, redhat enterprise_linux, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | edk2-aarch64 | 20190501stable-2.amzn2.0.1 |
| Amazon Linux 2 | edk2-ovmf | 20190501stable-2.amzn2.0.1 |
| Amazon Linux 2 | edk2-tools | 20190501stable-2.amzn2.0.1 |
| Amazon Linux 2 | edk2-tools-doc | 20190501stable-2.amzn2.0.1 |
| Amazon Linux 2 | edk2-tools-python | 20190501stable-2.amzn2.0.1 |
| Debian 12 | edk2 | 0~20181115.85588389-1 |
| Debian 13 | edk2 | 0~20181115.85588389-1 |
| Debian 14 | edk2 | 0~20181115.85588389-1 |
| Red Hat Enterprise Linux 7 | OVMF | 0:20180508-6.gitee3198e672e2.el7 |
| Red Hat Enterprise Linux 7 | ovmf | 0:20180508-6.gitee3198e672e2.el7 |
| Red Hat Enterprise Linux 8 | edk2 | 0:20190308git89910a39dcfd-6.el8 |
| Red Hat Enterprise Linux 8 | edk2-aarch64 | 0:20190308git89910a39dcfd-6.el8 |
| Red Hat Enterprise Linux 8 | edk2-ovmf | 0:20190308git89910a39dcfd-6.el8 |
| SUSE Linux Enterprise Desktop 12 SP4 | ovmf | 2017+git1510945757.b2662641d5-3.13.1 |
| SUSE Linux Enterprise Module for Server Applications 15 | ovmf | 2017+git1510945757.b2662641d5-5.19.1 |
| SUSE Linux Enterprise Server 12 SP4 | ovmf | 2017+git1510945757.b2662641d5-3.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | ovmf | 2017+git1510945757.b2662641d5-3.13.1 |
| Ubuntu Pro 16.04 LTS | edk2 | 0~20160408.ffea0a2c-2ubuntu0.2+esm1 |
| Ubuntu Pro 18.04 LTS | edk2 | 0~20180205.c0d9813c-2ubuntu0.3+esm1 |
| openSUSE Leap 15.0 | ovmf | 2017+git1510945757.b2662641d5-lp150.4.16.1 |
| openSUSE Tumbleweed | ovmf | 202105-3.4 |