SB2018122701 - OpenSUSE Linux update for ovmf
Published: December 27, 2018
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 6 secuirty vulnerabilities.
1) Privilege escalation (CVE-ID: CVE-2017-5731)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to an error when handling malicious input. A local attacker can supply specially crafted files in TianoCompress.c and gain elevated privileges.
2) Privilege escalation (CVE-ID: CVE-2017-5732)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to an error when handling malicious input. A local attacker can supply specially crafted files in BaseUefiDecompressLib.c and gain elevated privileges.
3) Heap-based buffer overflow (CVE-ID: CVE-2017-5733)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to boundary error when handling malicious input. A local attacker can supply specially crafted files in MakeTable() function, trigger heap-based buffer overflow and gain elevated privileges.
4) Stack-based buffer overflow (CVE-ID: CVE-2017-5734)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to boundary error when handling malicious input. A local attacker can supply specially crafted files in MakeTable() function, trigger stack-based buffer overflow and gain elevated privileges.
5) Heap-based buffer overflow (CVE-ID: CVE-2017-5735)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to boundary error when handling malicious input. A local attacker can supply specially crafted files in Decode() function, trigger heap-based buffer overflow and gain elevated privileges.
6) Authentication bypass (CVE-ID: CVE-2018-3613)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to logic error in MdeModulePkg. A local attacker can bypass configuration access controls and gain elevated privileges.
Remediation
Install update from vendor's website.