UBUNTU-CVE-2021-38575

HIGH8.1

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

Published Sep 14, 2021

Modified 9 months ago

Fix available

Details

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

Affected Packages

edk2

Ubuntu 20.04 LTS

Affected versions:

0~20190606.20d2e5a1-2ubuntu10~20190828.37eef910-30~20190828.37eef910-40~20191122.bd85bf54-10~20191122.bd85bf54-1ubuntu10~20191122.bd85bf54-20~20191122.bd85bf54-2ubuntu10~20191122.bd85bf54-2ubuntu20~20191122.bd85bf54-2ubuntu30~20191122.bd85bf54-2ubuntu3.1+1 more

Fixed in:

0~20191122.bd85bf54-2ubuntu3.3

edk2

Ubuntu Pro 16.04 LTS

Affected versions:

0~20150106.5c2d456b-20~20160104.c2a892d7-10~20160408.ffea0a2c-20~20160408.ffea0a2c-2ubuntu0.10~20160408.ffea0a2c-2ubuntu0.20~20160408.ffea0a2c-2ubuntu0.2+esm1

Fixed in:

0~20160408.ffea0a2c-2ubuntu0.2+esm3

edk2

Ubuntu Pro 18.04 LTS

Affected versions:

0~20170911.5dfba97c-10~20171010.234dbcef-10~20171027.76fd5a66-10~20171205.a9212288-10~20180105.0bc94c74-10~20180205.c0d9813c-10~20180205.c0d9813c-20~20180205.c0d9813c-2ubuntu0.10~20180205.c0d9813c-2ubuntu0.20~20180205.c0d9813c-2ubuntu0.3+1 more

Fixed in:

0~20180205.c0d9813c-2ubuntu0.3+esm2

References

REPORT

https://edk2.groups.io/g/devel/message/76198

REPORT

https://ubuntu.com/security/CVE-2021-38575

ADVISORY

https://ubuntu.com/security/notices/USN-5088-1

ADVISORY

https://ubuntu.com/security/notices/USN-7060-1

REPORT