Launchpad.net

CVE 2019-14575

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

Related bugs and status

CVE-2019-14575 (Candidate) is related to these bugs:

Bug #1820764: CVE-2018-12178 CVE-2018-12180 CVE-2018-12181

		In	Importance	Status
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Ubuntu)	Undecided	Fix Released
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Debian)	Unknown	Fix Released
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Ubuntu Xenial)	Undecided	Fix Released
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Ubuntu Trusty)	Undecided	Confirmed
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Ubuntu Precise)	Undecided	Won't Fix
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Ubuntu Bionic)	Undecided	Fix Released
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Ubuntu Disco)	Undecided	Fix Released
1820764	CVE-2018-12178 CVE-2018-12180 CVE-2018-12181	edk2 (Ubuntu Cosmic)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://bugzilla.tiano...
MLIST: [debian-lts-announce] ...