Authentication bypass in edk2 - CVE-2018-3613

Vulnerability identifier: #VU16724

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-3613

CWE-ID: CWE-840

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to logic error in MdeModulePkg. A local attacker can bypass configuration access controls and gain elevated privileges.

edk2
Opensuse
Ubuntu
ovmf (Ubuntu package)
qemu-efi (Ubuntu package)
qemu-efi-aarch64 (Ubuntu package)
qemu-efi-arm (Ubuntu package)

Install update from vendor's website.

ovmf (Ubuntu package) - update to Ubuntu Pro
qemu-efi (Ubuntu package) - update to Ubuntu Pro
qemu-efi-aarch64 (Ubuntu package) - update to Ubuntu Pro
qemu-efi-arm (Ubuntu package) - update to Ubuntu Pro

• https://edk2-docs.gitbooks.io/security-advisory/content/edk-ii-authenticated-variable-bypass.html

• OpenSUSE Linux update for ovmf
• OpenSUSE Linux update for ovmf
• Ubuntu update for edk2