https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:03:57 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:3017 <p><strong>Affected:</strong> AlmaLinux:8: edk2-aarch64, AlmaLinux:8: edk2-ovmf</p> <p>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.</p> <p>Security Fix(es):</p> <p>* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235) * EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763) * EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764) * EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765) * edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229) * edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231) * edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232) * edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: edk2-aarch64, AlmaLinux:8: edk2-ovmf</p> <p>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.</p> <p>Security Fix(es):</p> <p>* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235) * EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763) * EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764) * EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765) * edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229) * edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231) * edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232) * edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:3017 https://cve.radiocsirt.org/vuln/bdu:2024-01539 bdu:2024-01539 https://cve.radiocsirt.org/vuln/bdu:2024-01539 https://cve.radiocsirt.org/vuln/bell-cve-2022-36765 <p><strong>Affected:</strong> Alpaquita:23: edk2, Alpaquita:25: edk2, Alpaquita:stream: edk2</p> <p><strong>Affected:</strong> Alpaquita:23: edk2, Alpaquita:25: edk2, Alpaquita:stream: edk2</p> https://cve.radiocsirt.org/vuln/bell-cve-2022-36765 https://cve.radiocsirt.org/vuln/euvd-2026-257675 EUVD-2026-257675 https://cve.radiocsirt.org/vuln/euvd-2026-257675 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36765 <p>EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.</p> <p>EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-36765 https://cve.radiocsirt.org/vuln/gsd-2022-36765 gsd-2022-36765 https://cve.radiocsirt.org/vuln/gsd-2022-36765 https://cve.radiocsirt.org/vuln/msrc_cve-2022-36765 msrc_CVE-2022-36765 https://cve.radiocsirt.org/vuln/msrc_cve-2022-36765 https://cve.radiocsirt.org/vuln/oesa-2024-1350 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: edk2, openEuler:20.03-LTS-SP4: edk2, openEuler:22.03-LTS: edk2, openEuler:22.03-LTS-SP1: edk2, openEuler:22.03-LTS-SP2: edk2, openEuler:22.03-LTS-SP3: edk2</p> <p>EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es):</p> <p>EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability. (CVE-2022-36765)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: edk2, openEuler:20.03-LTS-SP4: edk2, openEuler:22.03-LTS: edk2, openEuler:22.03-LTS-SP1: edk2, openEuler:22.03-LTS-SP2: edk2, openEuler:22.03-LTS-SP3: edk2</p> <p>EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es):</p> <p>EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability. (CVE-2022-36765)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1350 https://cve.radiocsirt.org/vuln/rhsa-2024:3017 <p>EDK2: heap buffer overflow in Tcg2MeasureGptTable() EDK2: heap buffer overflow in Tcg2MeasurePeImage() EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message edk2: Out of Bounds read when handling a ND Redirect message with truncated options edk2: Infinite loop when parsing unknown options in the Destination Options header edk2: Infinite loop when parsing a PadN option in the Destination Options header edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message</p> <p>EDK2: heap buffer overflow in Tcg2MeasureGptTable() EDK2: heap buffer overflow in Tcg2MeasurePeImage() EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message edk2: Out of Bounds read when handling a ND Redirect message with truncated options edk2: Infinite loop when parsing unknown options in the Destination Options header edk2: Infinite loop when parsing a PadN option in the Destination Options header edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message</p> https://cve.radiocsirt.org/vuln/rhsa-2024:3017 https://cve.radiocsirt.org/vuln/suse-su-2026:0120-1 <p>Security update for ovmf</p> <p>Security update for ovmf</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0120-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-36765 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2</p> <p>EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2</p> <p>EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-36765 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0050 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Insyde UEFI Firmware ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Insyde UEFI Firmware ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0050