Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE: 2018:4155-1 Moderate: OVMF Security Fix for Buffer Overflow

suse
Calendar Grey December 17, 2018
Dist Suse Esm H88
A new version of ovmf has been released, addressing 6 vulnerabilities such as buffer overflow and privilege escalation. Discover the details.
An update that fixes 6 vulnerabilities is now available

Summary

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPEND_WRITE (bsc#1115916). - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c (bsc#1115917). - CVE-2017-5732: Fixed privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (bsc#1115917). - CVE-2017-5733: Fixed privilege escalation via heap-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5734: Fixed privilege escalation via stack-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5735: Fixed privilege escalation via heap-based buffer overflow in Decode() function (bsc#1115917). Non security issues fixed:

Topics%20covered

Topics Covered

security advisory moderate buffer overflow privilege escalation security fix SUSE Linux Enterprise ovmf

References

#1115916 #1115917 #1117998

Cross- CVE-2017-5731 CVE-2017-5732 CVE-2017-5733

CVE-2017-5734 CVE-2017-5735 CVE-2018-3613

Affected Products:

SUSE Linux Enterprise Module for Server Applications 15

https://www.suse.com/security/cve/CVE-2017-5731.html

https://www.suse.com/security/cve/CVE-2017-5732.html

https://www.suse.com/security/cve/CVE-2017-5733.html

https://www.suse.com/security/cve/CVE-2017-5734.html

https://www.suse.com/security/cve/CVE-2017-5735.html

https://www.suse.com/security/cve/CVE-2018-3613.html

https://bugzilla.suse.com/1115916

https://bugzilla.suse.com/1115917

https://bugzilla.suse.com/1117998

Announcement ID: SUSE-SU-2018:4155-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow privilege escalation security fix SUSE Linux Enterprise ovmf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here