41. BootGuard TOCTOU

Description:
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
Impact
Escalation of Privilege, Information Disclosure and/or Denial of Service
Severity
Medium 7.1 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Recommendation:
EDK II commits:
​https://github.com/tianocore/edk2-staging/tree/BootGuardTocTouVulnerabilityMitigation​
Patches:
​https://bugzilla.tianocore.org/attachment.cgi?id=316​
Readme:
​https://github.com/tianocore/edk2-staging/blob/BootGuardTocTouVulnerabilityMitigation/Readme.md​
Acknowledgments:
Trammel Hudson and Peter Bosch
References:
CVE-2019-11098
EDK II Bugzilla #1614​

40. AuthVariable Timestamp Zeroing on APPEND_WRITE

Last modified 2yr ago