CVE-2019-14584

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.

Security Fix(es):

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.(CVE-2019-14584)

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.(CVE-2019-11098)

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.

Security Fix(es):

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.(CVE-2019-14584)

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.(CVE-2019-11098)

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12179).

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12182).

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12183).

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access. (CVE-2019-0160).

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access. (CVE-2019-0161).

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access. (CVE-2019-14553).

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access. (CVE-2019-14558).

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. (CVE-2019-14559).

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. (CVE-2019-14563).

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. (CVE-2019-14575).

EDK II incorrectly parsed signed PKCS #7 data. An attacker could use this issue to cause EDK II to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-14584).

Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access. (CVE-2019-14586).

Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access. (CVE-2019-14587).

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access. (CVE-2019-14562).

This update for ovmf fixes the following issues:

• CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for ovmf fixes the following issues:

• CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789).

This update was imported from the SUSE:SLE-15:Update update project.

This update for shim fixes the following issues:

• Updated openSUSE x86 signature

• Avoid the error message during linux system boot (boo#1184454)

• Prevent the build id being added to the binary. That can cause issues with the signature

Update to 15.4 (boo#1182057)

• Rename the SBAT variable and fix the self-check of SBAT
• sbat: add more dprint()
• arm/aa64: Swizzle some sections to make old sbsign happier
• arm/aa64 targets: put .rel* and .dyn* in .rodata

• Change the SBAT variable name and enhance the handling of SBAT (boo#1182057)

Update to 15.3 for SBAT support (boo#1182057)

• Drop gnu-efi from BuildRequires since upstream pull it into the

• Generate vender-specific SBAT metadata

  • Add dos2unix to BuildRequires since Makefile requires it for vendor SBAT

• Update dbx-cert.tar.xz and vendor-dbx.bin to block the following sign keys:

  • SLES-UEFI-SIGN-Certificate-2020-07.crt
  • openSUSE-UEFI-SIGN-Certificate-2020-07.crt

• Check CodeSign in the signer's EKU (boo#1177315)

• Fixed NULL pointer dereference in AuthenticodeVerify() (boo#1177789, CVE-2019-14584)

• All newly released openSUSE kernels enable kernel lockdown and signature verification, so there is no need to add the prompt anymore.

• shim-install: Support changing default shim efi binary in /usr/etc/default/shim and /etc/default/shim (boo#1177315)

These are all security issues fixed in the ovmf-202105-3.4 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the shim-15.4-4.2 package on the GA media of openSUSE Tumbleweed.

This update for ovmf fixes the following issues:

• CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789).

This update for ovmf fixes the following issues:

• CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789).

This update for ovmf fixes the following issues:

• CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789).

This update for ovmf fixes the following issues:

• Fixed a possible buffer overflow in IScsiDxe (bsc#1186151)
• CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578)
• CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
• CVE-2019-14584: ovmf,shim: NULL pointer dereference in AuthenticodeVerify() (bsc#1177789)

Laszlo Ersek discovered that EDK II incorrectly validated certain signed images. An attacker could possibly use this issue with a specially crafted image to cause EDK II to hang, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2019-14562)

It was discovered that EDK II incorrectly parsed signed PKCS #7 data. An attacker could use this issue to cause EDK II to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-14584)