CVE-2025-3770 affecting package edk2 for versions less than 20240524git3e722403cd16-9

CVE-2025-3770 affecting package edk2 for versions less than 20240524git3e722403cd16-9. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2023-48733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS- resident attacker to bypass Secure Boot. CVE-2023-48733 No...

Linux Distros Unpatched Vulnerability : CVE-2024-38805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2025-2295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2021-28213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. CVE-2021-28213 Note that Nessus relies on the presence of the package a...

Fedora 29 : edk2 (2019-bff1cbaba3)

The remote Fedora 29 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-bff1cbaba3 advisory. Use YYYYMMDD versioning to fix upgrade path ---- Update to stable-201903 Update to openssl-1.1.0j Move to python3 deps Tenable has extracted the...

Important: edk2

Issue Overview: EDK2 contains a vulnerability in BIOS where an attacker may cause "Protection Mechanism Failure" by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability. CVE-2025-3770 Affected...

SUSE CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

UBUNTU-CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2023-45229 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2023-45229 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2024-38796 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2024-38796 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2022-4304 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2022-4304 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

CVE-2023-45231 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

CVE-2023-45231 affecting package edk2 for versions less than 20230301gitf80f052277c8-42. A patched version of the package is available...

AZL-66108 CVE-2025-3770 affecting package edk2 for versions less than 20240524git3e722403cd16-9

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

AZL-66122 CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2024-38796)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38796 advisory. - EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker May cause memory...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45231)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45231 advisory. - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighb...