AZL-66122 CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45231)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45231 advisory. - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighb...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2024-38796)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38796 advisory. - EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker May cause memory...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45229)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45229 advisory. - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA...

CVE-2023-45229 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45229 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-45235 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45235 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-5678 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-5678 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-3817 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-3817 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-2650 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-2650 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-45230 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45230 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-45231 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45231 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-45232 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45232 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-0465 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-0465 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-45234 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45234 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2023-45233 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45233 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

CVE-2024-0727 affecting package hvloader for versions less than 1.0.1-9

CVE-2024-0727 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

Azure Linux 3.0 Security Update: hvloader / openssl (CVE-2024-9143)

The version of hvloader / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9143 advisory. - Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field...

AZL-58828 CVE-2025-2295 affecting package hvloader for versions less than 1.0.1-16

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

Azure Linux 3.0 Security Update: hvloader / openssl (CVE-2022-2097)

The version of hvloader / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2097 advisory. - AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45236)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45236 advisory. - EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This...