CVE-2021-28211
Fixed in a distro release EPSS <1%
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
Products: tianocore edk_ii
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | edk2-aarch64 | 20240813-296.amzn2 |
| Amazon Linux 2 | edk2-ovmf | 20240813-296.amzn2 |
| Amazon Linux 2 | edk2-tools | 20240813-296.amzn2 |
| Amazon Linux 2 | edk2-tools-doc | 20240813-296.amzn2 |
| Arch Linux | edk2-shell | 202011-1 |
| Debian 12 | edk2 | 2020.11-1 |
| Debian 13 | edk2 | 2020.11-1 |
| Debian 14 | edk2 | 2020.11-1 |
| Debian 9 | edk2 | 0~20161202.7bbe0b3e-1+deb9u2 |
| Red Hat Enterprise Linux 8 | edk2 | 0:20200602gitca407c7246bf-4.el8_4.1 |
| Red Hat Enterprise Linux 8 | edk2-aarch64 | 0:20200602gitca407c7246bf-4.el8_4.1 |
| Red Hat Enterprise Linux 8 | edk2-ovmf | 0:20200602gitca407c7246bf-4.el8_4.1 |
| Rocky Linux 8 | edk2 | 0:20200602gitca407c7246bf-4.el8_4.1 |
| SUSE Enterprise Storage 6 | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | ovmf | 201911-7.11.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | ovmf | 2015+git1462940744.321151f-19.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | ovmf | 2017+git1510945757.b2662641d5-3.35.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise Server 15-LTSS | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ovmf | 2017+git1510945757.b2662641d5-3.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Manager Proxy 4.0 | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Manager Retail Branch Server 4.0 | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| SUSE Manager Server 4.0 | ovmf | 2017+git1510945757.b2662641d5-5.43.1 |
| Ubuntu 20.04 LTS | edk2 | 0~20191122.bd85bf54-2ubuntu3.2 |
| Ubuntu 20.04 LTS | edk2 | 0~20191122.bd85bf54-2ubuntu3.6 |
| Ubuntu 22.04 LTS | edk2 | 2022.02-3ubuntu0.22.04.3 |
| Ubuntu Pro 16.04 LTS | edk2 | 0~20160408.ffea0a2c-2ubuntu0.2+esm3 |
| Ubuntu Pro 18.04 LTS | edk2 | 0~20180205.c0d9813c-2ubuntu0.3+esm2 |
| openSUSE Leap 15.2 | ovmf | 201911-lp152.6.11.1 |
| openSUSE Tumbleweed | ovmf | 202105-3.4 |