CVE-2021-28211

Related Files

Red Hat Security Advisory 2021-2591-01

Posted Jun 30, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-2591-01 - EDK is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Issues addressed include a heap corruption vulnerability.

tags | advisory

systems | linux, redhat

advisories | CVE-2021-28211

SHA-256 | 063296efe6ec4ddecef8d49f7c83574f5883cb0e1c3061e0abcb882bf3db323f

Download | Favorite | View

Ubuntu Security Notice USN-4923-1

Posted Apr 21, 2021

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4923-1 - Laszlo Ersek discovered that EDK II incorrectly handled recursion. A remote attacker could possibly use this issue to cause EDK II to consume resources, leading to a denial of service. Satoshi Tanda discovered that EDK II incorrectly handled decompressing certain images. A remote attacker could use this issue to cause EDK II to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.

tags | advisory, remote, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2021-28210, CVE-2021-28211

SHA-256 | c6a40eaa9804bcbd688af5e22e4aacb4108392cf23d7cf4f045959af8339a0de

Download | Favorite | View