https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:09:17 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:5297 <p><strong>Affected:</strong> AlmaLinux:8: edk2-aarch64, AlmaLinux:8: edk2-ovmf</p> <p>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.</p> <p>Security Fix(es):</p> <p>* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236) * edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237) * edk2: Temporary DoS vulnerability (CVE-2024-1298)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: edk2-aarch64, AlmaLinux:8: edk2-ovmf</p> <p>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.</p> <p>Security Fix(es):</p> <p>* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236) * edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237) * edk2: Temporary DoS vulnerability (CVE-2024-1298)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:5297 https://cve.radiocsirt.org/vuln/bdu:2025-12007 bdu:2025-12007 https://cve.radiocsirt.org/vuln/bdu:2025-12007 https://cve.radiocsirt.org/vuln/bell-cve-2024-1298 <p><strong>Affected:</strong> Alpaquita:23: edk2, Alpaquita:stream: edk2</p> <p><strong>Affected:</strong> Alpaquita:23: edk2, Alpaquita:stream: edk2</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-1298 https://cve.radiocsirt.org/vuln/euvd-2026-257718 EUVD-2026-257718 https://cve.radiocsirt.org/vuln/euvd-2026-257718 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1298 <p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p> <p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1298 https://cve.radiocsirt.org/vuln/ghsa-xvcj-qw55-xx42 <p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p> <p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p> https://cve.radiocsirt.org/vuln/ghsa-xvcj-qw55-xx42 https://cve.radiocsirt.org/vuln/gsd-2024-1298 gsd-2024-1298 https://cve.radiocsirt.org/vuln/gsd-2024-1298 https://cve.radiocsirt.org/vuln/msrc_cve-2024-1298 msrc_CVE-2024-1298 https://cve.radiocsirt.org/vuln/msrc_cve-2024-1298 https://cve.radiocsirt.org/vuln/oesa-2024-1752 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: edk2, openEuler:22.03-LTS-SP1: edk2, openEuler:22.03-LTS-SP3: edk2, openEuler:24.03-LTS: edk2</p> <p>EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es): EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.(CVE-2024-1298)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: edk2, openEuler:22.03-LTS-SP1: edk2, openEuler:22.03-LTS-SP3: edk2, openEuler:24.03-LTS: edk2</p> <p>EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es): EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.(CVE-2024-1298)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1752 https://cve.radiocsirt.org/vuln/rhsa-2024:4747 <p>edk2: Temporary DoS vulnerability</p> <p>edk2: Temporary DoS vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4747 https://cve.radiocsirt.org/vuln/rhsa-2024:5297 <p>edk2: Predictable TCP Initial Sequence Numbers edk2: Use of a Weak PseudoRandom Number Generator edk2: Temporary DoS vulnerability</p> <p>edk2: Predictable TCP Initial Sequence Numbers edk2: Use of a Weak PseudoRandom Number Generator edk2: Temporary DoS vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2024:5297 https://cve.radiocsirt.org/vuln/suse-su-2024:4088-1 <p>Security update for ovmf</p> <p>Security update for ovmf</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4088-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1298 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2</p> <p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:20.04:LTS: edk2, Ubuntu:22.04:LTS: edk2, Ubuntu:24.04:LTS: edk2</p> <p>EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1298 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1274 <p>Ein lokaler Angreifer kann eine Schwachstelle in TianoCore EDK2 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in TianoCore EDK2 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1274