CVE-2018-12183

Published: Mar 27, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

Vendor	Product	Versions
Extensible Firmware Interface Development Kit (EDK II)	Extensible Firmware Interface Development Kit (EDK II)	affected `N/A`

References

https://edk2-docs.gitbooks.io/security-advisory/content/unlimited-fv-recursion.html

x_refsource_CONFIRM

107643

vdb-entry

x_refsource_BID

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

x_refsource_CONFIRM

FEDORA-2019-d47a9d4b8b

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-12183

Description

Affected Products

References