edk2 security update

20240909-2 - Create new 20240909 release for OL8 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK2: In the Linux...

ROS-20241017-06

A vulnerability in the PeCoffLoaderRelocateImage function of the Tianocore EDK2 library is related to the invocation of memory corruption memory due to overflow through a contiguous network. Exploitation of the vulnerability allows an attacker acting remotely to gain unauthorized access to...

CVE-2024-6119 affecting package edk2 for versions less than 20240524git3e722403cd16-3

CVE-2024-6119 affecting package edk2 for versions less than 20240524git3e722403cd16-3. A patched version of the package is available...

RHSA-2024:8104 Red Hat Security Advisory: edk2 security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

[SECURITY] Fedora 41 Update: edk2-20240813-2.fc41

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. This package contains sample 64-bit UEFI firmware builds for QEMU and KVM...

edk2 bug fix and enhancement update

An update is available for edk2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...

CVE-2024-38796

A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2024-38796

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

AZL-49710 CVE-2024-38796 affecting package edk2 for versions less than 20240524git3e722403cd16-8

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

CVE-2024-38796

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

CVE-2024-38796

CVE-2024-38796 affects the EDK II Edk2 firmware ecosystem, specifically a vulnerability in the PeCoffLoaderRelocateImage() that may enable memory corruption via an adjacent network. The issue can lead to confidentiality, integrity, and availability impact as described in multiple connected source...

CVE-2024-38796

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

PT-2024-28227

Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The issue is related to a vulnerability in the PeCoffLoaderRelocateImage function, which can cause memory corruption due to an overflow. This can be triggered via an adjacent network, potentiall...

CVE-2022-36763 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

CVE-2022-36763 affecting package edk2 for versions less than 20230301gitf80f052277c8-40. A patched version of the package is available...

CVE-2023-45230 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

CVE-2023-45230 affecting package edk2 for versions less than 20230301gitf80f052277c8-40. A patched version of the package is available...

CVE-2023-45237 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

CVE-2023-45237 affecting package edk2 for versions less than 20230301gitf80f052277c8-40. A patched version of the package is available...

CVE-2022-36764 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

CVE-2022-36764 affecting package edk2 for versions less than 20230301gitf80f052277c8-40. A patched version of the package is available...

CVE-2023-45233 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

CVE-2023-45233 affecting package edk2 for versions less than 20230301gitf80f052277c8-40. A patched version of the package is available...

CVE-2023-45235 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

CVE-2023-45235 affecting package edk2 for versions less than 20230301gitf80f052277c8-40. A patched version of the package is available...