crítica
openSUSE-SU-2019:1083-1
Security update for ovmf
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun (bsc#1127820). - CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet (bsc#1127821). - CVE-2018-3630: Fixed a logic error in FV parsing which could allow a local attacker to bypass the chain of trust checks (bsc#1127822). This update was imported from the SUSE:SLE-15:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.0 | ovmf, ovmf-tools, qemu-ovmf-ia32 y 2 más | 2017+git1510945757.b2662641d5-lp150.4.13.1 |
Mostrar las 5 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.0 | ovmf | 2017+git1510945757.b2662641d5-lp150.4.13.1 |
| openSUSE Leap 15.0 | ovmf-tools | 2017+git1510945757.b2662641d5-lp150.4.13.1 |
| openSUSE Leap 15.0 | qemu-ovmf-ia32 | 2017+git1510945757.b2662641d5-lp150.4.13.1 |
| openSUSE Leap 15.0 | qemu-ovmf-x86_64 | 2017+git1510945757.b2662641d5-lp150.4.13.1 |
| openSUSE Leap 15.0 | qemu-ovmf-x86_64-debug | 2017+git1510945757.b2662641d5-lp150.4.13.1 |
Referencias
- https://bugzilla.suse.com/1127820
- https://bugzilla.suse.com/1127821
- https://bugzilla.suse.com/1127822
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RBHHJFWMTAGCQFDWWVONGJIFVT7IEDVF/#RBHHJFWMTAGCQFDWWVONGJIFVT7IEDVF
- https://www.suse.com/security/cve/CVE-2018-12178/
- https://www.suse.com/security/cve/CVE-2018-12180/
- https://www.suse.com/security/cve/CVE-2018-3630/
- https://www.suse.com/support/security/rating/