Debian/edk2: medium 6.8
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical acc
Action: Upgrade edk2 to 2020.11-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2020.11-5 | - |
Fixed versions
| 2020.11-5 |
Sources
- osv: DEBIAN-CVE-2019-11098#Debian:14/edk2
- https://security-tracker.debian.org/tracker/CVE-2019-11098
published · modified · JSON