CVE Vulnerabilities

CVE-2018-3613

Published: Mar 27, 2019 | Modified: Nov 07, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

Affected Software

Name Vendor Start Version End Version
Edk_ii Tianocore udk2015 (including) udk2015 (including)
Edk_ii Tianocore udk2017 (including) udk2017 (including)
Edk_ii Tianocore udk2018 (including) udk2018 (including)

References