CVE-2019-11098

Related Files

Ubuntu Security Notice USN-5088-1

Posted Sep 23, 2021

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5088-1 - It was discovered that EDK II incorrectly handled input validation in MdeModulePkg. A local user could possibly use this issue to cause EDK II to crash, resulting in a denial of service, obtain sensitive information or execute arbitrary code. Paul Kehrer discovered that OpenSSL used in EDK II incorrectly handled certain input lengths in EVP functions. An attacker could possibly use this issue to cause EDK II to crash, resulting in a denial of service. Various other issues were also addressed.

tags | advisory, denial of service, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2019-11098, CVE-2021-23840, CVE-2021-3712, CVE-2021-38575

SHA-256 | 364506777cba9ac853135b7f75877b1504446feea3f08770e812fad58981b8b6

Download | Favorite | View