Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: 2018:4207-1 Moderate: OVMF Security Fixes and Recommendations

suse
Calendar Grey December 20, 2018
Dist Suse Esm H88
SUSE has issued a vital security update for OVMF, addressing six vulnerabilities linked to privilege escalation in virtual environments, urging prompt user action to ensure robust security.
An update that fixes 6 vulnerabilities is now available

Summary

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPEND_WRITE (bsc#1115916). - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c (bsc#1115917). - CVE-2017-5732: Fixed privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (bsc#1115917). - CVE-2017-5733: Fixed privilege escalation via heap-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5734: Fixed privilege escalation via stack-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5735: Fixed privilege escalation via heap-based buffer overflow in Decode() function (bsc#1115917). Patch Instructions:

Topics%20covered

Topics Covered

security advisory moderate buffer overflow privilege escalation patch SUSE Linux Enterprise Server ovmf

References

#1115916 #1115917

Cross- CVE-2017-5731 CVE-2017-5732 CVE-2017-5733

CVE-2017-5734 CVE-2017-5735 CVE-2018-3613

Affected Products:

SUSE Linux Enterprise Server 12-SP3

https://www.suse.com/security/cve/CVE-2017-5731.html

https://www.suse.com/security/cve/CVE-2017-5732.html

https://www.suse.com/security/cve/CVE-2017-5733.html

https://www.suse.com/security/cve/CVE-2017-5734.html

https://www.suse.com/security/cve/CVE-2017-5735.html

https://www.suse.com/security/cve/CVE-2018-3613.html

https://bugzilla.suse.com/1115916

https://bugzilla.suse.com/1115917

Announcement ID: SUSE-SU-2018:4207-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow privilege escalation patch SUSE Linux Enterprise Server ovmf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here