This update for ovmf fixes the following issues :

Security issue fixed :

CVE-2019-0161: Fixed a stack overflow in UsbBusDxe and UsbBusPei, which could potentially be triggered by a local unauthenticated user (bsc#1131361).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2437 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The following packages have been upgraded to a later upstream version: imgbased (1.1.9), ovirt-node-ng     (4.3.5), redhat-release-virtualization-host (4.3.5), redhat-virtualization-host (4.3.5). (BZ#1669357,     BZ#1669365, BZ#1684986, BZ#1711193, BZ#1717250, BZ#1726917)

    Security Fix(es):

    * python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc     (CVE-2019-10160)

    * rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled (CVE-2018-16881)

    * edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161)

    * openssl: 0-byte record padding oracle (CVE-2019-1559)

    * cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment     (CVE-2019-10139)

    * sssd: improper implementation of GPOs due to too restrictive permissions (CVE-2018-16838)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
(CVE-2018-12182)

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access. (CVE-2019-0161)

Buffer overflows were discovered in UDF-related codes under MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe, which could be triggered with long file names or invalid formatted UDF media. (CVE-2019-0160)

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12183)

Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
(CVE-2018-12179)

This update for ovmf fixes the following issues :

Security issue fixed :

  - CVE-2019-0161: Fixed a stack overflow in UsbBusDxe and     UsbBusPei, which could potentially be triggered by a     local unauthenticated user (bsc#1131361).

This update was imported from the SUSE:SLE-15:Update update project.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4031:02 advisory.

    * edk2: Privilege escalation via processing of malformed files in TianoCompress.c (CVE-2017-5731)
      * edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c     (CVE-2017-5732)
      * edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function (CVE-2017-5733)
      * edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function (CVE-2017-5734)
      * edk2: Privilege escalation via heap-based buffer overflow in Decode() function (CVE-2017-5735)
      * edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated     users (CVE-2018-3613)
      * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407)
      * edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181)
      * edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media     (CVE-2019-0160)
      * edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
124675	SUSE SLES12 Security Update : ovmf (SUSE-SU-2019:1157-1)	Nessus	SuSE Local Security Checks	5/7/2019	5/28/2024	medium
127986	RHEL 7 : Red Hat Virtualization (RHSA-2019:2437)	Nessus	Red Hat Local Security Checks	8/20/2019	11/6/2024	critical
129069	Amazon Linux 2 : edk2 (ALAS-2019-1290)	Nessus	Amazon Linux Local Security Checks	9/20/2019	4/24/2024	critical
124713	openSUSE Security Update : ovmf (openSUSE-2019-1352)	Nessus	SuSE Local Security Checks	5/9/2019	5/24/2024	medium
289995	MiracleLinux 7 : ovmf-20180508-6.gitee3198e672e2.el7 (AXSA:2019-4031:02)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical

Detections

Analytics

Plugins Search

medium

critical

critical

medium

critical