CVE:CVE-2019-14584
CNNVD:CNNVD-202012-1417
EDK2是TianoCore（Tianocore）社区的一套基于UEFI和PI规范的跨平台固件开发环境。
Tianocore Edk2 种存在代码问题漏洞，以下产品及版本受到影响：Red Hat Enterprise Linux 7，Red Hat Enterprise Linux 8，Ubuntu 21.04 (Hirsute Hippo)，Ubuntu 20.10 (Groovy Gorilla)，Ubuntu 20.04 LTS (Focal Fossa)，Ubuntu 18.04 LTS (Bionic Beaver)，Ubuntu 16.04 LTS (Xenial Xerus)，Ubuntu 14.04 ESM (Trusty Tahr)Ubuntu 12.04 ESM (Precise Pangolin)，SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2，SUSE Linux Enterprise Module for Server Applications 15 SP1，SUSE Linux Enterprise Module for Server Applications 15 SP2，SUSE Linux Enterprise Module for Server Applications 15 SP2
solution:Upgrade tianocore edk2 to a higher version than 2020-10-21,and avoid the version (,2020-10-21)