Lucene search
TianoCoreCVELIST:CVE-2021-38578HistoryMar 03, 2022 - 9:53 p.m.
CVE-2021-38578
2022-03-0321:53:37
CWE-124
TianoCore
www.cve.org
2
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.9%
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "EDK II",
"vendor": "TianoCore",
"versions": [
{
"status": "affected",
"version": "edk2-stable202208"
}
]
}
]Related
nessus
nessus
SUSE SLES12 Security Update : ovmf (SUSE-SU-2023:1941-1)
2023-04-25 00:00:00
SUSE SLES15 Security Update : ovmf (SUSE-SU-2023:1958-1)
2023-04-25 00:00:00
SUSE SLES15 Security Update : ovmf (SUSE-SU-2023:1940-1)
2023-04-25 00:00:00
osv
osv
CVE-2021-38578
2022-03-03 22:15:08
Important: edk2 security, bug fix, and enhancement update
2023-05-09 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2023-1652)
2023-04-27 00:00:00
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2023-1686)
2023-04-27 00:00:00
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2023-1945)
2023-05-16 00:00:00
redhatcve
redhatcve
CVE-2021-38578
2022-06-13 17:07:55
alpinelinux
alpinelinux
CVE-2021-38578
2022-03-03 22:15:08
nvd
nvd
CVE-2021-38578
2022-03-03 22:15:08
cve
cve
CVE-2021-38578
2022-03-03 22:15:08
debiancve
debiancve
CVE-2021-38578
2022-03-03 22:15:08
altlinux
altlinux
Security fix for the ALT Linux 10 package edk2 version 20221117-alt1
2022-12-21 00:00:00
prion
prion
Design/Logic Flaw
2022-03-03 22:15:00
ubuntucve
ubuntucve
CVE-2021-38578
2022-03-03 00:00:00
oraclelinux
oraclelinux
edk2 security, bug fix, and enhancement update
2023-05-15 00:00:00
almalinux
almalinux
Important: edk2 security, bug fix, and enhancement update
2023-05-09 00:00:00
redhat
redhat
ics
ics
Siemens RUGGEDCOM APE1808 Product Family
2023-09-14 12:00:00
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.9%
Related for CVELIST:CVE-2021-38578