CVE-2023-3446 affecting package hvloader for versions less than 1.0.1-6

CVE-2023-3446 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-28960 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-28960 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2023-0466 affecting package hvloader for versions less than 1.0.1-6

CVE-2023-0466 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-23170 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-23170 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-23775 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-23775 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2023-2975 affecting package hvloader for versions less than 1.0.1-6

CVE-2023-2975 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-6119 affecting package hvloader for versions less than 1.0.1-5

CVE-2024-6119 affecting package hvloader for versions less than 1.0.1-5. A patched version of the package is available...

CVE-2024-5535 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-5535 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-4603 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-4603 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-4741 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-4741 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

AZL-52910 CVE-2024-4741 affecting package hvloader for versions less than 1.0.1-6

Issue summary: Calling the OpenSSL API function SSLfreebuffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code...

AZL-49713 CVE-2024-38796 affecting package hvloader for versions less than 1.0.1-13

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

AZL-48798 CVE-2024-6119 affecting package hvloader for versions less than 1.0.1-5

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

CVE-2023-0215 affecting package hvloader for versions less than 1.0.1-4

CVE-2023-0215 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2023-0286 affecting package hvloader for versions less than 1.0.1-4

CVE-2023-0286 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2022-4450 affecting package hvloader for versions less than 1.0.1-4

CVE-2022-4450 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2022-4304 affecting package hvloader for versions less than 1.0.1-4

CVE-2022-4304 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2022-36764)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36764 advisory. - EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage function, allowing a user to trigg...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2022-36763)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36763 advisory. - EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to...

CBL Mariner 2.0 Security Update: edk2 / hvloader / openssl / nodejs18 (CVE-2023-0465)

The version of edk2 / hvloader / openssl / nodejs18 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0465 advisory. - Applications that use a non-default option when verifying certificates May be...