{"id":"CVE-2018-12183","aliases":["BELL-CVE-2018-12183","DEBIAN-CVE-2018-12183","EUVD-2018-4161","GHSA-9pwx-jwwh-vx6f","MGASA-2021-0035","UBUNTU-CVE-2018-12183","USN-6920-1"],"status":"published","title":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable...","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","severity":{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00502,"percentile":0.43257,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2019-03-27T19:17:46Z","modified":"2026-10-23T18:02:58Z","fixes":[{"ecosystem":"Debian:12","package":"edk2","fixed_in":["0~20181115.85588389-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"edk2","fixed_in":["0~20181115.85588389-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"edk2","fixed_in":["0~20181115.85588389-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","fixed_in":["0~20180205.c0d9813c-2ubuntu0.3+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20181115.85588389-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20181115.85588389-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20181115.85588389-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20201127stable-1.mga7"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20180205.c0d9813c-2ubuntu0.3+esm1"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20160408.ffea0a2c-2ubuntu0.2+esm1"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20180205.c0d9813c-2ubuntu0.3+esm1"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3"],"bundled":5}],"products":[{"vendor":"extensible firmware interface development kit (edk ii)","product":"extensible firmware interface development kit (edk ii)"},{"vendor":"tianocore","product":"edk_ii"}],"references":[{"url":"https://edk2-docs.gitbooks.io/security-advisory/content/unlimited-fv-recursion.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"http://www.securityfocus.com/bid/107643","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03912en_us","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12183"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/"},{"url":"https://github.com/advisories/GHSA-9pwx-jwwh-vx6f"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-12183","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-12183","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0035.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25939","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1712","tags":["web"]},{"url":"https://usn.ubuntu.com/4349-1/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/A23OH3MXQU7WURSP4PC66EXMG6INYFH6/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4684-1","tags":["advisory"]},{"url":"https://github.com/tianocore/edk2/releases","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-12183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12183","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6920-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-3613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-0160","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-12183","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","status":"published","published":"2019-03-27T19:17:46Z","modified":"2024-08-05T08:30:59.824Z","updated_at":"2026-11-02T14:35:06.320867Z"}],"euvd":[{"id":"EUVD-2018-4161","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","status":"published","published":"2019-03-27T19:17:46Z","modified":"2024-08-05T08:30:59Z","updated_at":"2026-11-03T02:39:53.575925Z"}],"ghsa":[{"id":"GHSA-9pwx-jwwh-vx6f","title":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable...","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","status":"published","published":"2022-05-13T01:49:29Z","modified":"2023-02-02T05:01:44Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:51:15.131458Z"}],"nvd":[{"id":"CVE-2018-12183","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","status":"published","published":"2019-03-27T20:29:03.567Z","modified":"2026-06-17T01:37:16.933Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:55.136632Z"}],"osv":[{"id":"BELL-CVE-2018-12183","title":"CVE-2018-12183 does not affect BellSoft software","status":"withdrawn","published":"2019-03-27T20:29:00Z","modified":"2026-01-26T09:47:29.532637Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-12183","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","status":"published","published":"2019-03-27T20:29:03.567Z","modified":"2026-04-16T04:43:39.270563254Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-12183","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","status":"published","published":"2019-03-27T20:29:03.567Z","modified":"2026-10-23T18:02:58.415290613Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-12183","description":"Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.","status":"published","published":"2019-03-27T20:29:00Z","modified":"2026-02-04T03:04:00.7859Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"MGASA-2021-0035","title":"Updated edk2 packages fix multiples security vulnerabilities","description":"Improper configuration in system firmware for EDK II may allow unauthenticated\nuser to potentially enable escalation of privilege, information disclosure\nand/or denial of service via local access. (CVE-2018-12179).\n\nInsufficient memory write check in SMM service for EDK II may allow an\nauthenticated user to potentially enable escalation of privilege, information\ndisclosure and/or denial of service via local access. (CVE-2018-12182).\n\nStack overflow in DxeCore for EDK II may allow an unauthenticated user to\npotentially enable escalation of privilege, information disclosure and/or\ndenial of service via local access. (CVE-2018-12183).\n\nBuffer overflow in system firmware for EDK II may allow unauthenticated user\nto potentially enable escalation of privilege and/or denial of service via\nnetwork access. (CVE-2019-0160).\n\nStack overflow in XHCI for EDK II may allow an unauthenticated user to\npotentially enable denial of service via local access. (CVE-2019-0161).\n\nImproper authentication in EDK II may allow a privileged user to potentially\nenable information disclosure via network access. (CVE-2019-14553).\n\nInsufficient control flow management in BIOS firmware for 8th, 9th, 10th\nGeneration Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 \u0026 5000 Series\nProcessors may allow an authenticated user to potentially enable denial of\nservice via adjacent access. (CVE-2019-14558).\n\nUncontrolled resource consumption in EDK II may allow an unauthenticated user\nto potentially enable denial of service via network access. (CVE-2019-14559).\n\nInteger truncation in EDK II may allow an authenticated user to potentially\nenable escalation of privilege via local access. (CVE-2019-14563).\n\nLogic issue in DxeImageVerificationHandler() for EDK II may allow an\nauthenticated user to potentially enable escalation of privilege via local\naccess. (CVE-2019-14575).\n\nEDK II incorrectly parsed signed PKCS #7 data. An attacker could use this\nissue to cause EDK II to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2019-14584).\n\nUse after free vulnerability in EDK II may allow an authenticated user to\npotentially enable escalation of privilege, information disclosure and/or\ndenial of service via adjacent access. (CVE-2019-14586).\n\nLogic issue EDK II may allow an unauthenticated user to potentially enable\ndenial of service via adjacent access. (CVE-2019-14587).\n\nInteger overflow in DxeImageVerificationHandler() EDK II may allow an\nauthenticated user to potentially enable denial of service via local access.\n(CVE-2019-14562).\n","status":"published","published":"2021-01-17T16:07:01Z","modified":"2026-04-16T04:42:41.889312057Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"USN-6920-1","title":"edk2 vulnerabilities","description":"It was discovered that EDK II was not properly performing bounds checks\nin Tianocompress, which could lead to a buffer overflow. An authenticated\nuser could use this issue to potentially escalate their privileges via \nlocal access. (CVE-2017-5731)\n\nIt was discovered that EDK II had an insufficient memory write check in\nthe SMM service, which could lead to a page fault occurring. An \nauthenticated user could use this issue to potentially escalate their\nprivileges, disclose information and/or create a denial of service via\nlocal access. (CVE-2018-12182)\n\nIt was discovered that EDK II incorrectly handled memory in DxeCore, which\ncould lead to a stack overflow. An unauthenticated user could this\nissue to potentially escalate their privileges, disclose information \nand/or create a denial of service via local access. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2018-12183)\n\nIt was discovered that EDK II incorrectly handled memory in the\nVariable service under certain circumstances. An authenticated user could\nuse this issue to potentially escalate their privileges, disclose \ninformation and/or create a denial of service via local access.\n(CVE-2018-3613)\n\nIt was discovered that EDK II incorrectly handled memory in its system\nfirmware, which could lead to a buffer overflow. An unauthenticated user\ncould use this issue to potentially escalate their privileges and/or \ncreate a denial of service via network access. This issue only affected\nUbuntu 18.04 LTS. (CVE-2019-0160)\n","status":"published","published":"2024-07-29T04:18:17Z","modified":"2026-06-25T13:32:28.890574168Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}