REDHAT-BUG-1683372
First published: Tue Feb 26 2019(Updated: )
A flaw was found in edk2. When registering a Ram disk whose size is not a multiple of 512 bytes, the BlockIo protocol produced by the RamDiskDxe driver will incur memory read/write overrun. The memory overrun will happen when reading/writing the last block on the Ram disk. Upstream Bug: <a href="https://bugzilla.tianocore.org/show_bug.cgi?id=1134">https://bugzilla.tianocore.org/show_bug.cgi?id=1134</a> Upstream Patch: <a href="https://lists.01.org/pipermail/edk2-devel/2019-February/037248.html">https://lists.01.org/pipermail/edk2-devel/2019-February/037248.html</a> <a href="https://lists.01.org/pipermail/edk2-devel/2019-February/037249.html">https://lists.01.org/pipermail/edk2-devel/2019-February/037249.html</a> <a href="https://lists.01.org/pipermail/edk2-devel/2019-February/037250.html">https://lists.01.org/pipermail/edk2-devel/2019-February/037250.html</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tianocore EDK II |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.tianocore.org/show_bug.cgi?id=1134
- https://lists.01.org/pipermail/edk2-devel/2019-February/037248.html
- https://lists.01.org/pipermail/edk2-devel/2019-February/037249.html
- https://lists.01.org/pipermail/edk2-devel/2019-February/037250.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1683374
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1683373
- https://access.redhat.com/errata/RHSA-2019:0809
- https://access.redhat.com/errata/RHSA-2019:0968
- https://access.redhat.com/errata/RHSA-2019:1116
- https://bugzilla.redhat.com/show_bug.cgi?id=1683372
Frequently Asked Questions
What is the severity of REDHAT-BUG-1683372?
The severity of REDHAT-BUG-1683372 is considered high due to the potential for memory read/write overrun.
How do I fix REDHAT-BUG-1683372?
To fix REDHAT-BUG-1683372, ensure that Ram disks are registered with sizes that are multiples of 512 bytes.
What impact does REDHAT-BUG-1683372 have on systems?
REDHAT-BUG-1683372 can lead to serious data corruption or system instability caused by memory overruns.
Which software is affected by REDHAT-BUG-1683372?
The vulnerability REDHAT-BUG-1683372 affects the TianoCore EDK II software when handling improperly sized Ram disks.
Is there a workaround for REDHAT-BUG-1683372?
Currently, the best workaround for REDHAT-BUG-1683372 is to avoid using Ram disks with sizes that are not multiples of 512 bytes.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-12180
- agent/source
- agent/description
- agent/severity
- agent/event
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/tianocore
- canonical/tianocore edk ii