CVE-2025-2295 affecting package edk2 for versions less than 20230301gitf80f052277c8-45

CVE-2025-2295 affecting package edk2 for versions less than 20230301gitf80f052277c8-45. A patched version of the package is available...

CVE-2025-15467 affecting package edk2 for versions less than 20240524git3e722403cd16-12

CVE-2025-15467 affecting package edk2 for versions less than 20240524git3e722403cd16-12. A patched version of the package is available...

AZL-75905 CVE-2026-22796 affecting package edk2 for versions less than 20240524git3e722403cd16-14

Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where an ASN1TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS7 data. Impact summary: An application...

MiracleLinux 8 : edk2-20210527gite1999b264f1f-3.el8 (AXSA:2021-2801:05)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2801:05 advisory. openssl: integer overflow in CipherUpdate CVE-2021-23840 openssl: NULL pointer dereference in X509issuerandserialhash CVE-2021-23841 Tenable has...

MiracleLinux 8 : edk2-20220126gitbb1bba3d77-13.el8 (AXSA:2024-8236:06)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8236:06 advisory. edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message CVE-2023-45235 EDK2: heap buffer overflow in...

CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44

CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44. A patched version of the package is available...

CVE-2025-2296 affecting package edk2 for versions less than 20240524git3e722403cd16-11

CVE-2025-2296 affecting package edk2 for versions less than 20240524git3e722403cd16-11. A patched version of the package is available...

Huawei EulerOS: Security Advisory for EDK2 (EulerOS-SA-2025-2571)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-72545 CVE-2025-2296 affecting package edk2 for versions less than 20240524git3e722403cd16-11

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...

CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10

CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10. A patched version of the package is available...

CVE-2025-3770 affecting package edk2 for versions less than 20230301gitf80f052277c8-43

CVE-2025-3770 affecting package edk2 for versions less than 20230301gitf80f052277c8-43. A patched version of the package is available...

CVE-2023-45229 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2023-45229 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2024-38796 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2024-38796 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2022-4304 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2022-4304 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

Debian: Security Advisory (DLA-4207-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4603 affecting package edk2 for versions less than 20240524git3e722403cd16-8

CVE-2024-4603 affecting package edk2 for versions less than 20240524git3e722403cd16-8. A patched version of the package is available...

CVE-2024-38796 affecting package edk2 for versions less than 20240524git3e722403cd16-8

CVE-2024-38796 affecting package edk2 for versions less than 20240524git3e722403cd16-8. A patched version of the package is available...

Fedora: Security Advisory (FEDORA-2024-9cc95d56ce)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2025-1498)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2025-1470)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...