CVE-2019-14587 : Logic issue EDK II may allow an unauthenticated user to potentially enable denia

Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Published 2020-11-23 17:15:12

Updated 2022-01-01 18:11:17

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2019-14587

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Tianocore » Edk2 » Version: N/A
cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:A/AC:L/Au:N/C:N/I:N/A:P	6.5	2.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

https://bugzilla.tianocore.org/show_bug.cgi?id=1989

1989 – (CVE-2019-14587) Double EFI_PCI_ROOT_BRIDGE_IO_PROTOCOL_UNMAP in SdMmcCreateTrb
Issue Tracking;Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html

[SECURITY] [DLA 2645-1] edk2 security update
Mailing List;Third Party Advisory

CVEs referencing this url

Jump to