Amazon Linux 2 : edk2 (ALAS-2019-1273)

critical Nessus Plugin ID 128287

Language:

Synopsis

The remote Amazon Linux 2 host is missing a security update.

Description

Logic error in FV parsing in MdeModulePkg\Core\Pei\FwVol\FwVol.c (CVE-2018-3630)

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2017-5734)

A missing check leads to an out-of-bounds read and write flaw in NetworkPkg/DnsDxe as shipped in edk2, when it parses DNS responses. A remote attacker who controls the DNS server used by the vulnerable firmware may use this flaw to make the system crash. (CVE-2018-3613)

improper DNS packet size check (CVE-2018-12178)

Privilege escalation via heap-based buffer overflow in Decode() function (CVE-2017-5735)

Privilege escalation via heap-based buffer overflow in MakeTable() function (CVE-2017-5733)

Privilege escalation via processing of malformed files in TianoCompress.c (CVE-2017-5731)

Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (CVE-2017-5732)

A stack-based buffer overflow was discovered in edk2 when the HII database contains a Bitmap that claims to be 4-bit or 8-bit per pixel, but the palette contains more than 16(2^4) or 256(2^8) colors.
(CVE-2018-12181)

Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access.
(CVE-2018-12180)

Solution

Run 'yum update edk2' to update your system.

Plugin Details

Severity: Critical

ID: 128287

File Name: al2_ALAS-2019-1273.nasl

Version: 1.5

Type: local

Agent: unix

Family: Amazon Linux Local Security Checks

Published: 8/28/2019

Updated: 5/1/2024

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2018-3630

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2018-12178

Vulnerability Information

CPE: p-cpe:/a:amazon:linux:edk2-aarch64, p-cpe:/a:amazon:linux:edk2-debuginfo, p-cpe:/a:amazon:linux:edk2-ovmf, p-cpe:/a:amazon:linux:edk2-tools, p-cpe:/a:amazon:linux:edk2-tools-doc, p-cpe:/a:amazon:linux:edk2-tools-python, cpe:/o:amazon:linux:2

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 8/23/2019

Vulnerability Publication Date: 3/27/2019

Reference Information

CVE: CVE-2017-5731, CVE-2017-5732, CVE-2017-5733, CVE-2017-5734, CVE-2017-5735, CVE-2018-12178, CVE-2018-12180, CVE-2018-12181, CVE-2018-3613, CVE-2018-3630

ALAS: 2019-1273

Detections

Analytics