UBUNTU-CVE-2019-0161

MEDIUM5.5

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.

Published Mar 27, 2019

Modified 9 months ago

Fix available

Details

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.

Affected Packages

edk2

Ubuntu Pro 16.04 LTS

Affected versions:

0~20150106.5c2d456b-20~20160104.c2a892d7-10~20160408.ffea0a2c-20~20160408.ffea0a2c-2ubuntu0.10~20160408.ffea0a2c-2ubuntu0.20~20160408.ffea0a2c-2ubuntu0.2+esm1

Fixed in:

0~20160408.ffea0a2c-2ubuntu0.2+esm3

edk2

Ubuntu Pro 18.04 LTS

Affected versions:

0~20170911.5dfba97c-10~20171010.234dbcef-10~20171027.76fd5a66-10~20171205.a9212288-10~20180105.0bc94c74-10~20180205.c0d9813c-10~20180205.c0d9813c-20~20180205.c0d9813c-2ubuntu0.10~20180205.c0d9813c-2ubuntu0.20~20180205.c0d9813c-2ubuntu0.3+1 more

Fixed in:

0~20180205.c0d9813c-2ubuntu0.3+esm2

References

REPORT

https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html

REPORT

https://ubuntu.com/security/CVE-2019-0161

ADVISORY

https://ubuntu.com/security/notices/USN-7060-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-0161

CVSS Analysis