Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6920-1 advisory.

    It was discovered that EDK II was not properly performing bounds checks in Tianocompress, which could lead     to a buffer overflow. An authenticated user could use this issue to potentially escalate their privileges     via

    local access. (CVE-2017-5731)

    It was discovered that EDK II had an insufficient memory write check in the SMM service, which could lead     to a page fault occurring. An

    authenticated user could use this issue to potentially escalate their privileges, disclose information     and/or create a denial of service via local access. (CVE-2018-12182)

    It was discovered that EDK II incorrectly handled memory in DxeCore, which could lead to a stack overflow.
    An unauthenticated user could this issue to potentially escalate their privileges, disclose information

    and/or create a denial of service via local access. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2018-12183)

    It was discovered that EDK II incorrectly handled memory in the Variable service under certain     circumstances. An authenticated user could use this issue to potentially escalate their privileges,     disclose

    information and/or create a denial of service via local access. (CVE-2018-3613)

    It was discovered that EDK II incorrectly handled memory in its system firmware, which could lead to a     buffer overflow. An unauthenticated user could use this issue to potentially escalate their privileges     and/or

    create a denial of service via network access. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-0160)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
(CVE-2018-12182)

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access. (CVE-2019-0161)

Buffer overflows were discovered in UDF-related codes under MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe, which could be triggered with long file names or invalid formatted UDF media. (CVE-2019-0160)

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12183)

Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
(CVE-2018-12179)

ID	Name	Product	Family	Type	Severity
204912	Ubuntu 16.04 LTS / 18.04 LTS : EDK II vulnerabilities (USN-6920-1)	Nessus	Ubuntu Local Security Checks	Local	critical
129069	Amazon Linux 2 : edk2 (ALAS-2019-1290)	Nessus	Amazon Linux Local Security Checks	Local	critical

Detections

Analytics

CVE-2018-12183

medium

Tenable Plugins

critical

critical