CVE-2024-2511 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-2511 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2023-6129 affecting package hvloader for versions less than 1.0.1-6

CVE-2023-6129 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-6119 affecting package hvloader for versions less than 1.0.1-5

CVE-2024-6119 affecting package hvloader for versions less than 1.0.1-5. A patched version of the package is available...

CVE-2024-5535 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-5535 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-23170 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-23170 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-4603 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-4603 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2023-6237 affecting package hvloader for versions less than 1.0.1-6

CVE-2023-6237 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-23775 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-23775 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-28960 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-28960 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

AZL-52910 CVE-2024-4741 affecting package hvloader for versions less than 1.0.1-6

Issue summary: Calling the OpenSSL API function SSLfreebuffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code...

AZL-49713 CVE-2024-38796 affecting package hvloader for versions less than 1.0.1-13

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

AZL-48798 CVE-2024-6119 affecting package hvloader for versions less than 1.0.1-5

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

CVE-2023-0215 affecting package hvloader for versions less than 1.0.1-4

CVE-2023-0215 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2022-4304 affecting package hvloader for versions less than 1.0.1-4

CVE-2022-4304 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2023-0286 affecting package hvloader for versions less than 1.0.1-4

CVE-2023-0286 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2022-4450 affecting package hvloader for versions less than 1.0.1-4

CVE-2022-4450 affecting package hvloader for versions less than 1.0.1-4. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2022-36765)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36765 advisory. - EDK2 is susceptible to a vulnerability in the CreateHob function, allowing a user to trigger a...

CBL Mariner 2.0 Security Update: cloud-hypervisor / edk2 / hvloader / openssl (CVE-2022-4304)

The version of cloud-hypervisor / edk2 / hvloader / openssl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4304 advisory. - A timing based side channel exists in the OpenSSL RSA Decryption...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2022-36763)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36763 advisory. - EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to...

CBL Mariner 2.0 Security Update: cloud-hypervisor-cvm / edk2 / hvloader / kata-containers / kata-containers-cc / nodejs (CVE-2023-5678)

The version of cloud-hypervisor-cvm / edk2 / hvloader / kata-containers / kata-containers-cc / nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5678 advisory. - Issue summary: Generating...