CVE:CVE-2018-12180
CNNVD:CNNVD-201902-1039
EDK2是一套基于UEFI和PI规范的跨平台固件开发环境。
EDK2中存在缓冲区溢出漏洞。远程攻击者可利用该漏洞绕过安全限制，执行未经授权的操作或造成拒绝服务。
solution:Upgrade tianocore edk_ii to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0