Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-9ts5-pn9z-8yap
Summaryedk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()
Aliases
0
alias CVE-2019-14560
Fixed_packages
Affected_packages
0
url pkg:alpm/archlinux/edk2-shell@202111-4
purl pkg:alpm/archlinux/edk2-shell@202111-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9ts5-pn9z-8yap
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/edk2-shell@202111-4
1
url pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-2.el8_6?arch=2
purl pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-2.el8_6?arch=2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9ts5-pn9z-8yap
1
vulnerability VCID-vhkt-tbz6-wuf7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-2.el8_6%3Farch=2
2
url pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-4.el8_8?arch=3
purl pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-4.el8_8?arch=3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9ts5-pn9z-8yap
1
vulnerability VCID-ha36-4zhr-mfcu
2
vulnerability VCID-u9mt-wbe7-yfb6
3
vulnerability VCID-vhkt-tbz6-wuf7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-4.el8_8%3Farch=3
3
url pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-6?arch=el8
purl pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-6?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9ts5-pn9z-8yap
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/edk2@20220126gitbb1bba3d77-6%3Farch=el8
4
url pkg:rpm/redhat/edk2@20230524-3?arch=el9
purl pkg:rpm/redhat/edk2@20230524-3?arch=el9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8uhr-19zz-n3b7
1
vulnerability VCID-9ts5-pn9z-8yap
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/edk2@20230524-3%3Farch=el9
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14560.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14560.json
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1858038
reference_id 1858038
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1858038
3
reference_url https://security.archlinux.org/AVG-1360
reference_id AVG-1360
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1360
4
reference_url https://access.redhat.com/errata/RHSA-2023:6330
reference_id RHSA-2023:6330
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6330
5
reference_url https://access.redhat.com/errata/RHSA-2023:6919
reference_id RHSA-2023:6919
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6919
6
reference_url https://access.redhat.com/errata/RHSA-2024:0408
reference_id RHSA-2024:0408
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0408
7
reference_url https://access.redhat.com/errata/RHSA-2024:1415
reference_id RHSA-2024:1415
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1415
Weaknesses
0
cwe_id 252
name Unchecked Return Value
description The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-9ts5-pn9z-8yap