Dell BIOS contains a Stack based buffer overflow vulnerability
Published Feb 1, 2023
8.8
HIGHCVSS 3.1
EPSS 0.17%
Description
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.
Affected products
-
- Version 0StatusaffectedConstraints<=2.15.2
- Version
Configuration 1
- < 1.17.0
Running on/with
- n/a
Configuration 2
- < 1.4.3
Running on/with
- n/a
Configuration 3
- < 1.8.0
Running on/with
- n/a
Configuration 4
- < 1.4.3
Running on/with
- n/a
Configuration 5
- < 1.16.0
Configuration 6
- < 1.18.0
Configuration 7
- < 1.8.0
Configuration 8
- < 1.4.3
Configuration 9
- < 1.13.0
Running on/with
- n/a
Configuration 10
- < 2.15.2
Running on/with
- n/a
Configuration 11
- < 1.18.2
Running on/with
- n/a
Configuration 12
- < 1.6.0
Running on/with
- n/a
Configuration 13
- < 1.9.2
Running on/with
- n/a
Configuration 14
- < 1.9.2
Running on/with
- n/a
Configuration 15
- < 1.9.0
Running on/with
- n/a
Configuration 16
- < 1.9.0
Running on/with
- n/a
Configuration 17
- < 1.5.0
Running on/with
- n/a
Configuration 18
- < 1.10.0
Running on/with
- n/a
Configuration 19
- < 1.5.0
Running on/with
- n/a
Configuration 20
- < 1.10.0
Running on/with
- n/a
Configuration 21
- < 1.12.0
Running on/with
- n/a
Configuration 22
- < 2.15.0
Running on/with
- n/a
Configuration 23
- < 1.9.0
Running on/with
- n/a
Configuration 24
- < 2.14.0
Running on/with
- n/a
Configuration 25
- < 1.13.0
Running on/with
- n/a
Configuration 26
- < 1.5.0
Running on/with
- n/a
Configuration 27
- < 2.11.0
Running on/with
- n/a
Configuration 28
- < 2.11.0
Running on/with
- n/a
Configuration 29
- < 1.9.0
Running on/with
- n/a
Configuration 30
- < 2.15.2
Running on/with
- n/a
Configuration 31
- < 1.13.0
Running on/with
- n/a
Configuration 32
- < 2.11.0
Running on/with
- n/a
Configuration 33
- < 1.10.1
Running on/with
- n/a
Configuration 34
- < 1.13.0
Running on/with
- n/a
Configuration 35
- < 1.5.0
Running on/with
- n/a
Configuration 36
- < 1.12.0
Running on/with
- n/a
Configuration 37
- < 1.12.0
Running on/with
- n/a
Configuration 38
- < 1.18.2
Running on/with
- n/a
Configuration 39
- < 1.23.2
Running on/with
- n/a
Configuration 40
- < 1.23.2
Running on/with
- n/a
Configuration 41
- < 1.24.3
Running on/with
- n/a
Configuration 42
- < 1.22.0
Running on/with
- n/a
Configuration 43
- < 1.24.3
Running on/with
- n/a
Configuration 44
- < 1.17.3
Running on/with
- n/a
Configuration 45
- < 1.20.0
Running on/with
- n/a
Configuration 46
- < 1.17.2
Running on/with
- n/a
Configuration 47
- < 1.20.0
Running on/with
- n/a
Configuration 48
- < 1.20.0
Running on/with
- n/a
Configuration 49
- < 1.16.2
Running on/with
- n/a
Configuration 50
- < 1.17.0
Running on/with
- n/a
Configuration 51
- < 1.12.0
Running on/with
- n/a
Configuration 52
- < 1.12.0
Running on/with
- n/a
Configuration 53
- < 1.15.0
Running on/with
- n/a
Configuration 54
- < 1.12.0
Running on/with
- n/a
Configuration 55
- < 1.15.0
Running on/with
- n/a
Configuration 56
- < 1.12.0
Running on/with
- n/a
Configuration 57
- < 1.15.0
Running on/with
- n/a
Configuration 58
- < 1.15.0
Running on/with
- n/a
Configuration 59
- < 1.12.0
Running on/with
- n/a
Configuration 60
- < 1.24.3
Running on/with
- n/a
Configuration 61
- < 1.17.3
Running on/with
- n/a
Configuration 62
- < 1.16.0
Running on/with
- n/a
Configuration 63
- < 1.15.2
Running on/with
- n/a
Configuration 64
- < 1.15.2
Running on/with
- n/a
Configuration 65
- < 1.16.0
Running on/with
- n/a
Configuration 66
- < 1.16.0
Running on/with
- n/a
Configuration 67
- < 1.9.0
Running on/with
- n/a
Configuration 68
- < 1.5.0
Running on/with
- n/a
Configuration 69
- < 1.18.2
Running on/with
- n/a
Configuration 70
- < 1.9.0
Running on/with
- n/a
Configuration 71
- < 1.5.0
Running on/with
- n/a
Configuration 72
- < 1.12.0
Running on/with
- n/a
Configuration 73
- < 1.12.0
Running on/with
- n/a
Configuration 74
- < 2.15.0
Running on/with
- n/a
Configuration 75
- < 2.15.2
Running on/with
- n/a
Configuration 76
- < 1.13.0
Running on/with
- n/a
Configuration 77
- < 2.15.2
Running on/with
- n/a
Configuration 78
- < 1.13.0
Running on/with
- n/a
Configuration 79
- < 1.5.0
Running on/with
- n/a
Configuration 80
- < 1.12.0
Running on/with
- n/a
Configuration 81
- < 1.12.0
Running on/with
- n/a
Configuration 82
- < 1.15.2
Running on/with
- n/a
Configuration 83
- < 1.15.2
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (1)
- https://www.dell.com/support/kbdoc/000205716 vendor-advisoryVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.dell.com/support/kbdoc/000205716 | vendor-advisoryVendor Advisory |
Change history (0)
No recorded changes yet.