CVE-2019-14562

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.

Security Fix(es):

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.(CVE-2019-14562)

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.

Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12179).

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12182).

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12183).

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access. (CVE-2019-0160).

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access. (CVE-2019-0161).

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access. (CVE-2019-14553).

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access. (CVE-2019-14558).

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. (CVE-2019-14559).

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. (CVE-2019-14563).

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. (CVE-2019-14575).

EDK II incorrectly parsed signed PKCS #7 data. An attacker could use this issue to cause EDK II to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-14584).

Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access. (CVE-2019-14586).

Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access. (CVE-2019-14587).

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access. (CVE-2019-14562).

This update for ovmf fixes the following issues:

• CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
• Support more SCSI drivers (PvScsi, MptScsi and LsiScsi). (bsc#1119454)
• Enable LsiScsi explicitly since it's disabled by default

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for ovmf fixes the following issues:

• CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
• Use openSUSE CA for the opensuse flavor (bsc#1175674)

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the ovmf-202105-3.4 package on the GA media of openSUSE Tumbleweed.

This update for ovmf fixes the following issues:

• CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
• Support more SCSI drivers (PvScsi, MptScsi and LsiScsi). (bsc#1119454)
• Enable LsiScsi explicitly since it's disabled by default

This update for ovmf fixes the following issues:

• CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
• Use openSUSE CA for the opensuse flavor (bsc#1175674)

This update for ovmf fixes the following issues:

• CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
• Use openSUSE CA for the opensuse flavor (bsc#1175674)

This update for ovmf fixes the following issues:

• CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
• CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc() (bsc#1163927).

Laszlo Ersek discovered that EDK II incorrectly validated certain signed images. An attacker could possibly use this issue with a specially crafted image to cause EDK II to hang, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2019-14562)

It was discovered that EDK II incorrectly parsed signed PKCS #7 data. An attacker could use this issue to cause EDK II to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-14584)