CVE-2021-38575
Fixed in a distro release EPSS 2%
NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
Products: tianocore edk_ii
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | edk2-shell | 202108-1 |
| Debian 11 | edk2 | 2020.11-2+deb11u3 |
| Debian 12 | edk2 | 2021.08-1 |
| Debian 13 | edk2 | 2021.08-1 |
| Debian 14 | edk2 | 2021.08-1 |
| Red Hat Enterprise Linux 8 | edk2 | 0:20200602gitca407c7246bf-4.el8_4.2 |
| Red Hat Enterprise Linux 8 | edk2-aarch64 | 0:20200602gitca407c7246bf-4.el8_4.2 |
| Red Hat Enterprise Linux 8 | edk2-ovmf | 0:20200602gitca407c7246bf-4.el8_4.2 |
| Red Hat rhel eus 8.1 | edk2 | 0:20190308git89910a39dcfd-6.el8_1.1 |
| Red Hat rhel eus 8.1 | edk2-aarch64 | 0:20190308git89910a39dcfd-6.el8_1.1 |
| Red Hat rhel eus 8.1 | edk2-ovmf | 0:20190308git89910a39dcfd-6.el8_1.1 |
| Red Hat rhel eus 8.2 | edk2 | 0:20190829git37eef91017ad-9.el8_2.1 |
| Red Hat rhel eus 8.2 | edk2-aarch64 | 0:20190829git37eef91017ad-9.el8_2.1 |
| Red Hat rhel eus 8.2 | edk2-ovmf | 0:20190829git37eef91017ad-9.el8_2.1 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.4.7-20210804.0.el8_4 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.4.7-20210804.0.el8_4 |
| Rocky Linux 8 | edk2 | 0:20200602gitca407c7246bf-4.el8_4.2 |
| Ubuntu 20.04 LTS | edk2 | 0~20191122.bd85bf54-2ubuntu3.3 |
| Ubuntu 20.04 LTS | edk2 | 0~20191122.bd85bf54-2ubuntu3.6 |
| Ubuntu 22.04 LTS | edk2 | 2022.02-3ubuntu0.22.04.3 |
| Ubuntu Pro 16.04 LTS | edk2 | 0~20160408.ffea0a2c-2ubuntu0.2+esm3 |
| Ubuntu Pro 18.04 LTS | edk2 | 0~20180205.c0d9813c-2ubuntu0.3+esm2 |