REDHAT-BUG-1686783: Buffer Overflow
First published: Fri Mar 08 2019(Updated: )
A stack buffer overflow was found in edk2 when the HII database contains a Bitmap who claims as 4-bit or 8-bit per pixel, but the palette contains more than 16(2^4) or 256(2^8) colors. Upstream issue: <a href="https://bugzilla.tianocore.org/show_bug.cgi?id=1135">https://bugzilla.tianocore.org/show_bug.cgi?id=1135</a> References: <a href="https://lists.01.org/pipermail/edk2-devel/2019-March/037626.html">https://lists.01.org/pipermail/edk2-devel/2019-March/037626.html</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tianocore EDK II |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.tianocore.org/show_bug.cgi?id=1135
- https://lists.01.org/pipermail/edk2-devel/2019-March/037626.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1686785
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1686784
- https://github.com/tianocore/edk2/commit/ffe5f7a6b4e978dffbe1df228963adc914451106
- https://github.com/tianocore/edk2/commit/89910a39dcfd788057caa5d88b7e76e112d187b5
- https://access.redhat.com/errata/RHSA-2019:2125
- https://access.redhat.com/security/cve/cve-2018-12181
- https://access.redhat.com/errata/RHSA-2019:3338
- https://bugzilla.redhat.com/show_bug.cgi?id=1686783
Frequently Asked Questions
What is the severity of REDHAT-BUG-1686783?
The severity of REDHAT-BUG-1686783 is critical due to the potential for a stack buffer overflow.
How do I fix REDHAT-BUG-1686783?
To mitigate REDHAT-BUG-1686783, ensure that bitmap palettes contain a valid number of colors corresponding to their specified bit depth.
What software is affected by REDHAT-BUG-1686783?
REDHAT-BUG-1686783 affects the TianoCore edk2 software.
What type of vulnerability is REDHAT-BUG-1686783?
REDHAT-BUG-1686783 is classified as a stack buffer overflow vulnerability.
What conditions lead to REDHAT-BUG-1686783?
REDHAT-BUG-1686783 occurs when the HII database contains a bitmap with an incorrect palette claiming more colors than the specified bits.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-12181
- agent/source
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/tianocore
- canonical/tianocore edk ii