CVE catalog

CVE-2018-3613

UBUNTU-CVE-2018-3613

[CVE catalog]

Severity
Medium · CVSS 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.44% · Oct 25, 2026

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuedk2pro0~20150106.5c2d456b-2vulnerable
Ubuntuedk2pro0~20160104.c2a892d7-1vulnerable
Ubuntuedk2pro0~20160408.ffea0a2c-2vulnerable
Ubuntuedk2pro0~20160408.ffea0a2c-2ubuntu0.1vulnerable
Ubuntuedk2pro0~20160408.ffea0a2c-2ubuntu0.2vulnerable
Ubuntuedk2pro0~20160408.ffea0a2c-2ubuntu0.2+esm1fixed
Ubuntuedk2pro0~20170911.5dfba97c-1vulnerable
Ubuntuedk2pro0~20171010.234dbcef-1vulnerable
Ubuntuedk2pro0~20171027.76fd5a66-1vulnerable
Ubuntuedk2pro0~20171205.a9212288-1vulnerable
Ubuntuedk2pro0~20180105.0bc94c74-1vulnerable
Ubuntuedk2pro0~20180205.c0d9813c-1vulnerable
Ubuntuedk2pro0~20180205.c0d9813c-2vulnerable
Ubuntuedk2pro0~20180205.c0d9813c-2ubuntu0.1vulnerable
Ubuntuedk2pro0~20180205.c0d9813c-2ubuntu0.2vulnerable
Ubuntuedk2pro0~20180205.c0d9813c-2ubuntu0.3vulnerable
Ubuntuedk2pro0~20180205.c0d9813c-2ubuntu0.3+esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuedk2debpro0~20160408.ffea0a2c-2ubuntu0.2+esm1Not reportedUBUNTU-CVE-2018-3613Not reported
Ubuntuedk2debpro0~20180205.c0d9813c-2ubuntu0.3+esm1Not reportedUBUNTU-CVE-2018-3613Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]