CVE:CVE-2019-0160
CNNVD:CNNVD-201903-1095
EDK2是一套基于UEFI和PI规范的跨平台固件开发环境。
EDK2的系统固件中存在缓冲区溢出漏洞。攻击者可利用该漏洞提升权限和/造成拒绝服务。
solution:Upgrade tianocore edk_ii to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4