CVE-2017-5731
ovmf: Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an esc...
CVE-2017-5731 is fixed in 4 products on 1 platform, first by ovmf 0~20180205.c0d9813c-2ubuntu0.3+esm1, released October 28, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0039
33rd percentile
Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ovmf · Ubuntu 18.04.6 LTS (bionic) | 0~20180205.c0d9813c-2ubuntu0.3+esm1 | ovmf 0~20180205.c0d9813c-2ubuntu0.3+esm1 | Oct 28, 2019 |
| qemu-efi · Ubuntu 18.04.6 LTS (bionic) | 0~20180205.c0d9813c-2ubuntu0.3+esm1 | qemu-efi 0~20180205.c0d9813c-2ubuntu0.3+esm1 | Oct 28, 2019 |
| qemu-efi-aarch64 · Ubuntu 18.04.6 LTS (bionic) | 0~20180205.c0d9813c-2ubuntu0.3+esm1 | qemu-efi-aarch64 0~20180205.c0d9813c-2ubuntu0.3+esm1 | Oct 28, 2019 |
| qemu-efi-arm · Ubuntu 18.04.6 LTS (bionic) | 0~20180205.c0d9813c-2ubuntu0.3+esm1 | qemu-efi-arm 0~20180205.c0d9813c-2ubuntu0.3+esm1 | Oct 28, 2019 |