{"id":"CVE-2022-36765","aliases":["ALSA-2024:3017","ALSA-2024:4749","AZL-38920","AZL-39424","AZL-39556","BELL-CVE-2022-36765","CLSA-2025-1763122640","DEBIAN-CVE-2022-36765","DLA-4207-1","EUVD-2022-39465","GHSA-ch4w-v7m3-g8wx","OESA-2024-1350","RHSA-2024:3017","RHSA-2024:4749","RLSA-2024:3017","SUSE-SU-2026:0120-1","SUSE-SU-2026:0121-1","SUSE-SU-2026:0212-1","SUSE-SU-2026:0213-1","SUSE-SU-2026:20246-1","UBUNTU-CVE-2022-36765","USN-6638-1"],"status":"published","title":"Integer Overflow in CreateHob","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0029,"percentile":0.21674,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-680"],"published":"2024-01-09T16:10:16Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"edk2","fixed_in":["20240223gitedc6681206c1-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"hvloader","fixed_in":["1.0.1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"edk2","fixed_in":["20230301gitf80f052277c8-40"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"edk2","fixed_in":["0.0.202508-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"edk2","fixed_in":["0.0.202508-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"edk2","fixed_in":["0.0.202508-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"edk2","fixed_in":["2022.11-6+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"edk2","fixed_in":["2023.11-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"edk2","fixed_in":["2023.11-5"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"edk2","fixed_in":["202002-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"edk2","fixed_in":["202002-19.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"edk2","fixed_in":["202011-16.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"edk2","fixed_in":["202011-16.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"edk2","fixed_in":["202011-16.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"edk2","fixed_in":["202011-16.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ovmf","fixed_in":["202308-150600.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ovmf","fixed_in":["202308-150600.5.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"ovmf","fixed_in":["202308-150600.5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ovmf","fixed_in":["2017+git1510945757.b2662641d5-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ovmf","fixed_in":["2017+git1510945757.b2662641d5-3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ovmf","fixed_in":["202202-150400.5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ovmf","fixed_in":["202202-150400.5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ovmf","fixed_in":["202202-150400.5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ovmf","fixed_in":["202202-150400.5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ovmf","fixed_in":["202202-150400.5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ovmf","fixed_in":["202202-150400.5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ovmf","fixed_in":["202208-150500.6.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ovmf","fixed_in":["202208-150500.6.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ovmf","fixed_in":["202208-150500.6.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ovmf","fixed_in":["202208-150500.6.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ovmf","fixed_in":["202208-150500.6.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"ovmf","fixed_in":["202305-3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"edk2","fixed_in":["0~20191122.bd85bf54-2ubuntu3.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"edk2","fixed_in":["2022.02-3ubuntu0.22.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240223gitedc6681206c1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"hvloader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230301gitf80f052277c8-40"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202208-r0"},{"fixed":"0.0.202508-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202308-r2"},{"fixed":"0.0.202508-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202302-r0"},{"fixed":"0.0.202508-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.11-6+deb12u1"}]}],"versions":["2022.11-6"]},{"source":"osv","ecosystem":"Debian:13","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.11-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.11-5"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.11-2+deb11u3"}]}],"versions":["2020.11-2","2020.11-2+deb11u1","2020.11-2+deb11u2"],"bundled":16},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-19.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017+git1510945757.b2662641d5-3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202305-3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1","0~20160408.ffea0a2c-2ubuntu0.2+esm3","0~20160408.ffea0a2c-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3","0~20180205.c0d9813c-2ubuntu0.3+esm1","0~20180205.c0d9813c-2ubuntu0.3+esm2","0~20180205.c0d9813c-2ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20191122.bd85bf54-2ubuntu3.5"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.2"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20191122.bd85bf54-2ubuntu3.5"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.2"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1"],"bundled":10}],"products":[{"vendor":"tianocore","product":"edk2"}],"references":[{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-ch4w-v7m3-g8wx","tags":["x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3017","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36763","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36764","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36765","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45229","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45231","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45232","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45233","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45235","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257582","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257583","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257584","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258677","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258688","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258691","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258694","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258700","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3017.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45236","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45237","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258703","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258706","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-4749.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36765","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-36765","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763122640.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-36765","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1350","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258700","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-12626","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3017.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36763","tags":["advisory"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-xvv8-66cq-prwr","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36764","tags":["advisory"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-4hcq-p8q8-hj8j","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36765","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45229","tags":["advisory"]},{"url":"https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html","tags":["article"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45231","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pr27-mhpp-2ccr","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45232","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3r3p-444m-2g4p","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45233","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p9h6-p7cr-7842","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45235","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h9v6-q439-p7j2","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258706","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4749.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45236","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fqc4-ffq5-4r98","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45237","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fxqf-p2p3-gxvr","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3017","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260120-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218680","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36765","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260121-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260212-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260213-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620246-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-36765","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6638-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-36763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-36764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48733","tags":["report"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-36765","title":"Integer Overflow in CreateHob","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:10:16.35Z","modified":"2025-11-03T19:27:16.178Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-680"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-39465","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:10:16Z","modified":"2025-11-03T19:27:16Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:34.152725Z"}],"nvd":[{"id":"CVE-2022-36765","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43.5Z","modified":"2026-06-17T04:53:56.573Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-680","CWE-119"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"AZL-38920","title":"CVE-2022-36765 affecting package edk2 for versions less than 20240223gitedc6681206c1-1","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-39424","title":"CVE-2022-36765 affecting package hvloader for versions less than 1.0.1-3","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43Z","modified":"2026-04-21T04:28:43.456788Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39556","title":"CVE-2022-36765 affecting package edk2 for versions less than 20230301gitf80f052277c8-40","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43Z","modified":"2026-04-21T04:28:45.358052Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"BELL-CVE-2022-36765","status":"published","published":"2024-01-09T16:15:43.5Z","modified":"2026-04-22T07:15:30.284584Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-36765","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43.5Z","modified":"2026-10-20T10:56:59.811193068Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DEBIAN-CVE-2022-36765","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43.5Z","modified":"2026-11-03T08:03:03.794528147Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"OESA-2024-1350","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n\nEDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.\r\n\r\n(CVE-2022-36765)","status":"published","published":"2024-03-29T11:06:47Z","modified":"2026-08-18T01:18:20.406876174Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2024:3017","title":"Red Hat Security Advisory: edk2 security update","status":"published","published":"2024-09-23T18:00:04Z","modified":"2026-06-26T11:15:07Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4749","title":"Red Hat Security Advisory: edk2 security update","status":"published","published":"2024-09-16T19:13:49Z","modified":"2026-06-26T12:22:32.54650329Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2024:3017","title":"Important: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)\n\n* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)\n\n* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)\n\n* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)\n\n* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)\n\n* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)\n\n* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)\n\n* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T20:08:43.691431Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-36765","description":"EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:00Z","modified":"2026-10-05T19:20:11.354602254Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2024:3017","title":"Important: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)\n* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)\n* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)\n* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)\n* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)\n* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)\n* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)\n* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.642406656Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:4749","title":"Moderate: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)\n* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)\n* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-23T00:00:00Z","modified":"2026-10-29T11:31:47.147096536Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1763122640","title":"edk2: Fix of 3 CVEs","description":"- CVE-2022-36763: fix heap buffer overflow in TPM2 measure boot library when\n  processing GPT partition tables\n- CVE-2022-36764: fix heap buffer overflow in TPM measure boot library when\n  calculating PE image event size\n- CVE-2022-36765: fix integer overflow in CreateHob() function that could lead\n  to undersized HOB allocation and out-of-bounds memory access\n- Refactoring: fix symbol collision between TPM libraries introduced by\n  CVE-2022-36763 and CVE-2022-36764 patches","status":"published","published":"2025-11-14T12:17:24Z","modified":"2026-06-01T00:31:25.673848677Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-4207-1","title":"edk2 - security update","status":"published","published":"2025-06-02T00:00:00Z","modified":"2026-03-09T01:21:23.402813Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"SUSE-SU-2026:0120-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).\n","status":"published","published":"2026-01-14T06:46:44Z","modified":"2026-02-04T03:45:53.308296Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0121-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).\n","status":"published","published":"2026-01-14T06:47:26Z","modified":"2026-01-14T21:00:19.628652Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0212-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).\n","status":"published","published":"2026-01-22T12:08:32Z","modified":"2026-03-23T04:52:00.728154Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0213-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).\n","status":"published","published":"2026-01-22T12:08:49Z","modified":"2026-03-23T04:52:01.134086Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20246-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).\n","status":"published","published":"2026-01-16T13:04:57Z","modified":"2026-03-23T04:47:20.443743Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"USN-6638-1","title":"edk2 vulnerabilities","description":"Marc Beatove discovered buffer overflows exit in EDK2. An attacker on the\nlocal network could potentially use this to impact availability or possibly\ncause remote code execution. (CVE-2022-36763, CVE-2022-36764,\nCVE-2022-36765)\n\nIt was discovered that a buffer overflows exists in EDK2's Network Package\nAn attacker on the local network could potentially use these to impact\navailability or possibly cause remote code execution. (CVE-2023-45230,\nCVE-2023-45234, CVE-2023-45235)\n\nIt was discovered that an out-of-bounds read exists in EDK2's Network\nPackage An attacker on the local network could potentially use this to\nimpact confidentiality. (CVE-2023-45231)\n\nIt was discovered that infinite-loops exists in EDK2's Network Package\nAn attacker on the local network could potentially use these to impact\navailability. (CVE-2023-45232, CVE-2023-45233)\n\nMate Kukri discovered that an insecure default to allow UEFI Shell in\nEDK2 was left enabled in Ubuntu's EDK2. An attacker could use this to\nbypass Secure Boot. (CVE-2023-48733)\n","status":"published","published":"2024-02-15T01:36:15Z","modified":"2026-04-27T17:04:39.263284Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}