Debian/edk2: medium 6.7
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Action: Upgrade edk2 to 2023.11-7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2023.11-7 | - |
Fixed versions
| 2023.11-7 |
Sources
- osv: DEBIAN-CVE-2023-48733#Debian:14/edk2
- https://security-tracker.debian.org/tracker/CVE-2023-48733
published · modified · JSON