Insyde's Security Pledge

Recent Security Advisories

INSYDE-SA-2023025

Product

CVSS Score

Original Date

Last Revised

InsydeH2O

8.1

2023-04-10

Summary

[EDK2] NetworkPkg/IScsiDxe: remotely exploitable buffer overflows.

Vulnerability Details

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-38575

NetworkPkg/IScsiDxe: remotely exploitable buffer overflows.

Solution Information

Kernel 5.0: Version 05.0A.11
Kernel 5.1: Version 05.18.09
Kernel 5.2: Version 05.28.05
Kernel 5.3: Version 05.37.05
Kernel 5.4: Version 05.43.42
Kernel 5.5: Version 05.51.42

Acknowledgements

Revision History

Revision #

Date

Description

1

2023-04-10

Initial Release