Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2019-14559: Debian edk2 may suffer network‑based denial of service
CVE-2019-14559 · published 5 years ago
Summary
The edk2 firmware package used in Debian can be tricked by anyone on the network to consume excessive system resources. This can cause the affected machine to become unresponsive or crash, disrupting services. Apply the latest Debian updates for edk2 or disable unnecessary network access to the firmware component.
What to do
- Update debian edk2 to version 0~20200229.4c0f6e34-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | edk2 |
< 0~20200229.4c0f6e34-1 Fix: upgrade to 0~20200229.4c0f6e34-1
|
| Debian:13 | debian | edk2 |
< 0~20200229.4c0f6e34-1 Fix: upgrade to 0~20200229.4c0f6e34-1
|
| Debian:14 | debian | edk2 |
< 0~20200229.4c0f6e34-1 Fix: upgrade to 0~20200229.4c0f6e34-1
|
| – | tianocore | edk2 |
All versions
cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:* |
Original advisory text
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.
References
- https://security-tracker.debian.org/tracker/CVE-2019-14559 Vendor Advisory
- https://bugzilla.tianocore.org/show_bug.cgi?id=2031 Issue Tracking
- https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html Mailing List Third Party Advisory
Severity
7.5
High
Type
CWE-401Memory Leak
Timeline
Published23 Nov 2020
Updated4 Nov 2026
First seen21 Sep 2026
Track software like this
Free during beta