Oval Definition:oval:org.opensuse.security:def:202138578
Revision Date:2023-04-22Version:1
Title:CVE-2021-38578
Description:

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2021-38578
SUSE CVE-2021-38578
SUSE-SU-2023:1921-1
SUSE-SU-2023:1940-1
SUSE-SU-2023:1941-1
Platform(s):SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Micro 5.4
SUSE Linux Enterprise Real Time 15 SP2
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Micro 5.3 is installed
  • AND Package Information
  • qemu-ovmf-x86_64 is affected
  • OR qemu-uefi-aarch64 is affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Real Time 15 SP2 is installed
  • AND ovmf is affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
  • AND
  • ovmf is affected
  • OR ovmf-tools is affected
  • OR qemu-ovmf-x86_64 is affected
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND Package Information
  • ovmf is affected
  • OR ovmf-tools is affected
  • OR qemu-ovmf-x86_64 is affected
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.4 is installed
  • AND Package Information
  • qemu-ovmf-x86_64 is affected
  • OR qemu-uefi-aarch64 is affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND ovmf is affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • ovmf is affected
  • OR ovmf-tools is affected
  • OR qemu-ovmf-x86_64 is affected
  • OR qemu-uefi-aarch64 is affected
  • BACK