The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7060-1 advisory.

    It was discovered that EDK II did not check the buffer length in XHCI,

    which could lead to a stack overflow. A local attacker could potentially use this issue to cause a denial     of service. This issue only affected

    Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-0161)

    Laszlo Ersek discovered that EDK II incorrectly handled recursion. A remote attacker could possibly use     this issue to cause EDK II to consume resources, leading to a denial of service. This issue only affected

    Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2021-28210)

    Satoshi Tanda discovered that EDK II incorrectly handled decompressing certain images. A remote attacker     could use this issue to cause EDK II to crash, resulting in a denial of service, or possibly execute     arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2021-28211)

    It was discovered that EDK II incorrectly decoded certain strings. A remote attacker could use this issue     to cause EDK II to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue     only

    affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2021-38575)

    It was discovered that EDK II had integer underflow vulnerability in

    SmmEntryPoint, which could result in a buffer overflow. An attacker could potentially use this issue to     cause a denial of service. (CVE-2021-38578)

    Elison Niven discovered that OpenSSL, vendored in EDK II, incorrectly

    handled the c_rehash script. A local attacker could possibly use this

    issue to execute arbitrary commands when c_rehash is run. This issue

    only affected Ubuntu 16.04 LTS. (CVE-2022-1292)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2437 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The following packages have been upgraded to a later upstream version: imgbased (1.1.9), ovirt-node-ng     (4.3.5), redhat-release-virtualization-host (4.3.5), redhat-virtualization-host (4.3.5). (BZ#1669357,     BZ#1669365, BZ#1684986, BZ#1711193, BZ#1717250, BZ#1726917)

    Security Fix(es):

    * python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc     (CVE-2019-10160)

    * rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled (CVE-2018-16881)

    * edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161)

    * openssl: 0-byte record padding oracle (CVE-2019-1559)

    * cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment     (CVE-2019-10139)

    * sssd: improper implementation of GPOs due to too restrictive permissions (CVE-2018-16838)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
(CVE-2018-12182)

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access. (CVE-2019-0161)

Buffer overflows were discovered in UDF-related codes under MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe, which could be triggered with long file names or invalid formatted UDF media. (CVE-2019-0160)

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. (CVE-2018-12183)

Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
(CVE-2018-12179)

This update for ovmf fixes the following issues :

Security issue fixed :

  - CVE-2019-0161: Fixed a stack overflow in UsbBusDxe and     UsbBusPei, which could potentially be triggered by a     local unauthenticated user (bsc#1131361).

This update was imported from the SUSE:SLE-15:Update update project.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4031:02 advisory.

    * edk2: Privilege escalation via processing of malformed files in TianoCompress.c (CVE-2017-5731)
      * edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c     (CVE-2017-5732)
      * edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function (CVE-2017-5733)
      * edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function (CVE-2017-5734)
      * edk2: Privilege escalation via heap-based buffer overflow in Decode() function (CVE-2017-5735)
      * edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated     users (CVE-2018-3613)
      * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407)
      * edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181)
      * edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media     (CVE-2019-0160)
      * edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
208691	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : EDK II vulnerabilities (USN-7060-1)	Nessus	Ubuntu Local Security Checks	2024/10/10	2025/9/3	critical
127986	RHEL 7 : Red Hat Virtualization (RHSA-2019:2437)	Nessus	Red Hat Local Security Checks	2019/8/20	2024/11/6	critical
129069	Amazon Linux 2 : edk2 (ALAS-2019-1290)	Nessus	Amazon Linux Local Security Checks	2019/9/20	2024/4/24	critical
124713	openSUSE Security Update : ovmf (openSUSE-2019-1352)	Nessus	SuSE Local Security Checks	2019/5/9	2024/5/24	medium
289995	MiracleLinux 7 : ovmf-20180508-6.gitee3198e672e2.el7 (AXSA:2019-4031:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical

检测

插件搜索

critical

critical

critical

medium

critical