Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 20.10, 20.04 LTS: USN-4923-1 Critical: edk2 Denial Of Service

ubuntu
Calendar Grey April 20, 2021
Dist Ubuntu Esm H88
Security flaws in EDK II addressed in Ubuntu USN-4924-1, impacting remote code execution and potential service disruptions.
Several security issues were fixed in EDK II.

Summary

Several security issues were fixed in EDK II.

Software Description:

- edk2: UEFI firmware for virtual machines

Details:

Laszlo Ersek discovered that EDK II incorrectly handled recursion. A

remote attacker could possibly use this issue to cause EDK II to consume

resources, leading to a denial of service. (CVE-2021-28210)

Satoshi Tanda discovered that EDK II incorrectly handled decompressing

certain images. A remote attacker could use this issue to cause EDK II to

crash, resulting in a denial of service, or possibly execute arbitrary

code. (CVE-2021-28211)

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu firmware edk2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  ovmf                            2020.05-5ubuntu0.2
  qemu-efi                        2020.05-5ubuntu0.2
  qemu-efi-aarch64                2020.05-5ubuntu0.2
  qemu-efi-arm                    2020.05-5ubuntu0.2

Ubuntu 20.04 LTS:
  ovmf                            0~20191122.bd85bf54-2ubuntu3.2
  qemu-efi                        0~20191122.bd85bf54-2ubuntu3.2
  qemu-efi-aarch64                0~20191122.bd85bf54-2ubuntu3.2
  qemu-efi-arm                    0~20191122.bd85bf54-2ubuntu3.2

After a standard system update you need to restart the virtual machines
that use the affected firmware to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4923-1

CVE-2021-28210, CVE-2021-28211

Severity
critical
Lowest
Low
Medium
High
Critical

April 20, 2021

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu firmware edk2

Package Information

https://launchpad.net/ubuntu/+source/edk2/2020.05-5ubuntu0.2
https://launchpad.net/ubuntu/+source/edk2/0~20191122.bd85bf54-2ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here