125 matches found
RHEL 8 : edk2 (RHSA-2024:5623)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:5623 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2024-2204)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: edk2 security update
An update for edk2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
edk2 security update
20220126gitbb1bba3d77-13.el810.2 20220126gitbb1bba3d77-13.el810.1 - edk2-MdeModulePkg-Change-use-of-EFID-to-DEBUG.patch RHEL-21854 RHEL-21856 RHEL-40099 - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch RHEL-21854 RHEL-21856 RHEL-40099 - edk2-MdePkg-Apply-uncrustify-changes.patch...
ALSA-2024:5297 Moderate: edk2 security update
EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: edk2: Predictable TCP Initial Sequence Numbers CVE-2023-45236 edk2: Use of a Weak PseudoRandom Number Generator CVE-2023-452...
Moderate: edk2 security update
EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: edk2: Predictable TCP Initial Sequence Numbers CVE-2023-45236 edk2: Use of a Weak PseudoRandom Number Generator CVE-2023-452...
Moderate: Red Hat Security Advisory: edk2 security update
An update for edk2 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
CVE-2024-1298 affecting package edk2 for versions less than 20230301gitf80f052277c8-39
CVE-2024-1298 affecting package edk2 for versions less than 20230301gitf80f052277c8-39. A patched version of the package is available...
CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2024-1298)
The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1298 advisory. - EDK2 contains a vulnerability when S3 sleep is activated where an Attacker May cause a...
Medium: edk2
Issue Overview: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability. CVE-2024-1298 Affected Packages: edk2 Note: This adviso...
Medium: edk2
Issue Overview: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability. CVE-2024-1298 Affected Packages: edk2 Note: This adviso...
Amazon Linux 2 : edk2 (ALAS-2024-2578)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2578 advisory. EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a...
OESA-2024-1752 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful...
Fedora 39 : efifs (2024-69933b0732)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-69933b0732 advisory. - Update bundled edk2 to 20240524 2284243 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...
Fedora: Security Advisory (FEDORA-2024-07342adb87)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-69933b0732)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-1298 affecting package hvloader for versions less than 1.0.1-3
CVE-2024-1298 affecting package hvloader for versions less than 1.0.1-3. A patched version of the package is available...
CVE-2024-1298 Integer Overflow caused by divide by zero during S3 suspension
EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability...
CVE-2024-1298
CVE-2024-1298 affects EDK2 (the firmware development kit) with a vulnerability triggered when S3 sleep is activated, allowing a local attacker to cause a Division-by-Zero from a UINT32 overflow, leading to a loss of availability. Exploitation is local; no remote vector described. A patched edk2 p...
CVE-2011-1298
creationtimestamp| type| source ---|---|--- 2024-02-05 09:11:25+00:00| seen| https://t.me/ctinow/179054...