Detections
Analytics
CentOS 7 : ovmf (CESA-2019:0809)
high Nessus Plugin ID 124415
Language:
Synopsis
The remote CentOS host is missing a security update.Description
An update for ovmf is now available for Red Hat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
OVMF (Open Virtual Machine Firmware) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.
Security Fix(es) :
* edk2: Buffer Overflow in BlockIo service for RAM disk (CVE-2018-12180)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Solution
Update the affected ovmf package.See Also
Plugin Details
Severity: High
ID: 124415
File Name: centos_RHSA-2019-0809.nasl
Version: 1.4
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 5/1/2019
Updated: 1/21/2020
Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2018-12180
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:centos:centos:ovmf, cpe:/o:centos:centos:7
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 4/30/2019
Vulnerability Publication Date: 3/27/2019
Reference Information
CVE: CVE-2018-12180
RHSA: 2019:0809