hvloader vulnerabilities (Azure Linux)
50 vulnerabilities.
-
hvloaderAzure Linux ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function 5.3 Medium -
hvloaderAzure Linux Missing ASN1_TYPE validation in PKCS#12 parsing 5.5 Medium -
hvloaderAzure Linux NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
hvloaderAzure Linux Missing ASN1_TYPE validation in TS_RESP_verify_response() function 7.5 High -
hvloaderAzure Linux Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High -
hvloaderAzure Linux Unauthenticated/unencrypted trailing bytes with low-level OCB function calls 4.0 Medium -
hvloaderAzure Linux Heap out-of-bounds write in BIO_f_linebuffer on short writes 4.7 Medium -
hvloaderAzure Linux Un-verified kernel bypass Secure Boot mechanism in direct boot mode 8.4 High -
hvloaderAzure Linux SMM IDT Privilege Escalation Vulnerability 7.0 High -
hvloaderAzure Linux Potential iSCSI R2T PDU Vulnerability 3.5 Low -
hvloaderAzure Linux Integer overflow in PeCoffLoaderRelocateImage 5.9 Medium -
hvloaderAzure Linux Possible denial of service in X.509 name checks 7.5 High -
hvloaderAzure Linux SSL_select_next_proto buffer overread 9.1 Critical -
hvloaderAzure Linux Integer Overflow caused by divide by zero during S3 suspension 6.0 Medium -
hvloaderAzure Linux Use After Free with SSL_free_buffers 7.5 High -
hvloaderAzure Linux Excessive time spent checking DSA keys and parameters 5.3 Medium -
hvloaderAzure Linux Unbounded memory growth with session handling in TLSv1.3 5.9 Medium -
hvloaderAzure Linux An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... 8.2 High -
hvloaderAzure Linux Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows... 7.5 High -
hvloaderAzure Linux An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... 5.5 Medium -
hvloaderAzure Linux PKCS12 Decoding crashes 5.5 Medium -
hvloaderAzure Linux Buffer Overflow in EDK II Network Package 8.3 High -
hvloaderAzure Linux Infinite loop in EDK II Network Package 7.5 High -
hvloaderAzure Linux Infinite loop in EDK II Network Package 7.5 High -
hvloaderAzure Linux Buffer Overflow in EDK II Network Package 8.3 High -
hvloaderAzure Linux Use of a Weak PseudoRandom Number Generator in EDK II Network Package 5.3 Medium -
hvloaderAzure Linux Predictable TCP ISNs in EDK II Network Package 5.8 Medium -
hvloaderAzure Linux Out-of-Bounds Read in EDK II Network Package 6.5 Medium -
hvloaderAzure Linux Buffer Overflow in EDK II Network Package 8.3 High -
hvloaderAzure Linux Out-of-Bounds Read in EDK II Network Package 6.5 Medium -
hvloaderAzure Linux Excessive time spent checking invalid RSA public keys 5.9 Medium -
hvloaderAzure Linux POLY1305 MAC implementation corrupts vector registers on PowerPC 6.5 Medium -
hvloaderAzure Linux Integer Overflow in CreateHob 7.0 High -
hvloaderAzure Linux Heap Buffer Overflow in Tcg2MeasurePeImage 7.0 High -
hvloaderAzure Linux Heap Buffer Overflow in Tcg2MeasureGptTable 7.0 High -
hvloaderAzure Linux Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
hvloaderAzure Linux Excessive time spent checking DH q parameter value 5.3 Medium -
hvloaderAzure Linux Excessive time spent checking DH keys and parameters 5.3 Medium -
hvloaderAzure Linux AES-SIV implementation ignores empty associated data entries 5.3 Medium -
hvloaderAzure Linux Possible DoS translating ASN.1 object identifiers 6.5 Medium -
hvloaderAzure Linux Certificate policy check not enabled 5.3 Medium -
hvloaderAzure Linux Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
hvloaderAzure Linux Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
hvloaderAzure Linux X.400 address type confusion in X.509 GeneralName 7.4 High -
hvloaderAzure Linux Use-after-free following BIO_new_NDEF 7.5 High -
hvloaderAzure Linux Double free after calling PEM_read_bio_ex 7.5 High -
hvloaderAzure Linux Timing Oracle in RSA Decryption 5.9 Medium -
hvloaderAzure Linux Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum... 4.7 Medium -
hvloaderAzure Linux AES OCB fails to encrypt some bytes 5.3 Medium -
hvloaderAzure Linux The c_rehash script allows command injection 7.3 High