rpm package

suse/ovmf&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1

pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1

Vulnerabilities (3)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2021-38578	Hig	7.4	< 2017+git1510945757.b2662641d5-150000.5.46.1	2017+git1510945757.b2662641d5-150000.5.46.1	Mar 3, 2022	Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
CVE-2021-28211	Med	6.7	< 2017+git1510945757.b2662641d5-5.43.1	2017+git1510945757.b2662641d5-5.43.1	Jun 11, 2021	A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
CVE-2021-28210	Hig	7.8	< 2017+git1510945757.b2662641d5-5.43.1	2017+git1510945757.b2662641d5-5.43.1	Jun 11, 2021	An unlimited recursion in DxeCore in EDK II.

CVE-2021-38578HigMar 3, 2022
affected < 2017+git1510945757.b2662641d5-150000.5.46.1fixed 2017+git1510945757.b2662641d5-150000.5.46.1
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
CVE-2021-28211MedJun 11, 2021
affected < 2017+git1510945757.b2662641d5-5.43.1fixed 2017+git1510945757.b2662641d5-5.43.1
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
CVE-2021-28210HigJun 11, 2021
affected < 2017+git1510945757.b2662641d5-5.43.1fixed 2017+git1510945757.b2662641d5-5.43.1
An unlimited recursion in DxeCore in EDK II.