Buffer overflow in IBM Power 9 Systems
CVE-2018-1992
The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345.
Vulnerability class: Buffer Overflow
EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ibm Power 9 Systems — versions OP910, OP920, FW910
- Ibm Power_system_ac922_\(8335-gtg\)
- Ibm Power_system_ac922_\(8335-gtg\)_firmware
- Ibm Power_system_ac922_\(8335-gth\)
- Ibm Power_system_ac922_\(8335-gth\)_firmware
- Ibm Power_system_ac922_\(8335-gtx\)
- Ibm Power_system_ac922_\(8335-gtx\)_firmware
- Ibm Power_system_h922_\(9223-22h\)
- Ibm Power_system_h922_\(9223-22h\)_firmware
- Ibm Power_system_h924_\(9223-42h\)
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)
Frequently asked questions
- What is CVE-2018-1992?
- CVE-2018-1992 is a medium-severity vulnerability in IBM Power 9 Systems, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 6.4/10. Published 2019-03-21.
- How severe is CVE-2018-1992?
- Medium severity. CVSS v3 base score is 6.4 out of 10.