Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-38578

Fixed in a distro release EPSS 1%CVSS 7.4

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

Published 2022-03-03 · CVE record · OSV

Products: tianocore edk_ii

Distro releases

ReleasePackageFixed in
AlmaLinux 9edk2-aarch6420221207gitfff6d81270b5-9.el9_2
AlmaLinux 9edk2-ovmf20221207gitfff6d81270b5-9.el9_2
AlmaLinux 9edk2-tools20221207gitfff6d81270b5-9.el9_2
AlmaLinux 9edk2-tools-doc20221207gitfff6d81270b5-9.el9_2
Amazon Linux 2edk2-aarch6420240813-296.amzn2
Amazon Linux 2edk2-ovmf20240813-296.amzn2
Amazon Linux 2edk2-tools20240813-296.amzn2
Amazon Linux 2edk2-tools-doc20240813-296.amzn2
Debian 11edk22020.11-2+deb11u3
Debian 12edk22022.11-1
Debian 13edk22022.11-1
Debian 14edk22022.11-1
Red Hat Enterprise Linux 9edk20:20221207gitfff6d81270b5-9.el9_2
Red Hat Enterprise Linux 9edk2-aarch640:20221207gitfff6d81270b5-9.el9_2
Red Hat Enterprise Linux 9edk2-debugsource0:20221207gitfff6d81270b5-9.el9_2
Red Hat Enterprise Linux 9edk2-ovmf0:20221207gitfff6d81270b5-9.el9_2
Red Hat Enterprise Linux 9edk2-tools0:20221207gitfff6d81270b5-9.el9_2
Red Hat Enterprise Linux 9edk2-tools-debuginfo0:20221207gitfff6d81270b5-9.el9_2
Red Hat Enterprise Linux 9edk2-tools-doc0:20221207gitfff6d81270b5-9.el9_2
SUSE Enterprise Storage 7ovmf201911-150200.7.27.1
SUSE Enterprise Storage 7.1ovmf202008-150300.10.20.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSovmf2017+git1510945757.b2662641d5-150000.5.46.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSovmf201911-150200.7.27.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSovmf202008-150300.10.20.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSovmf202008-150300.10.20.1
SUSE Linux Enterprise Micro 5.1ovmf202008-150300.10.20.1
SUSE Linux Enterprise Micro 5.2ovmf202008-150300.10.20.1
SUSE Linux Enterprise Micro 5.3ovmf202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.4ovmf202202-150400.5.10.1
SUSE Linux Enterprise Module for Server Applications 15 SP4ovmf202202-150400.5.10.1
SUSE Linux Enterprise Real Time 15 SP3ovmf202008-150300.10.20.1
SUSE Linux Enterprise Server 12 SP2-BCLovmf2015+git1462940744.321151f-19.26.1
SUSE Linux Enterprise Server 12 SP4-ESPOSovmf2017+git1510945757.b2662641d5-3.41.2
SUSE Linux Enterprise Server 12 SP4-LTSSovmf2017+git1510945757.b2662641d5-3.41.2
SUSE Linux Enterprise Server 12 SP5ovmf2017+git1510945757.b2662641d5-3.41.2
SUSE Linux Enterprise Server 15 SP1-LTSSovmf2017+git1510945757.b2662641d5-150000.5.46.1
SUSE Linux Enterprise Server 15 SP2-LTSSovmf201911-150200.7.27.1
SUSE Linux Enterprise Server 15 SP3-LTSSovmf202008-150300.10.20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4ovmf2017+git1510945757.b2662641d5-3.41.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5ovmf2017+git1510945757.b2662641d5-3.41.2
SUSE Linux Enterprise Server for SAP Applications 15 SP1ovmf2017+git1510945757.b2662641d5-150000.5.46.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2ovmf201911-150200.7.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3ovmf202008-150300.10.20.1
SUSE Manager Proxy 4.2ovmf202008-150300.10.20.1
SUSE Manager Server 4.2ovmf202008-150300.10.20.1
SUSE OpenStack Cloud 9ovmf2017+git1510945757.b2662641d5-3.41.2
SUSE OpenStack Cloud Crowbar 9ovmf2017+git1510945757.b2662641d5-3.41.2
Ubuntu 20.04 LTSedk20~20191122.bd85bf54-2ubuntu3.6
Ubuntu 22.04 LTSedk22022.02-3ubuntu0.22.04.3
Ubuntu Pro 16.04 LTSedk20~20160408.ffea0a2c-2ubuntu0.2+esm3
Ubuntu Pro 18.04 LTSedk20~20180205.c0d9813c-2ubuntu0.3+esm2
openSUSE Leap 15.4ovmf202202-150400.5.10.1
openSUSE Leap Micro 5.3ovmf202202-150400.5.10.1
openSUSE Tumbleweedovmf202211-1.1