edk2 vulnerabilities (Debian)
50 vulnerabilities.
-
edk2Debian Pre-boot RCE in EDK II PXE driver 9.5 Critical -
edk2Debian several issues with partition table measurements No score -
edk2Debian Out-of-Bounds Write in Google Brotli Decoder 9.2 Critical -
edk2Debian Un-verified kernel bypass Secure Boot mechanism in direct boot mode 8.4 High -
edk2Debian Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege 5.8 Medium -
edk2Debian UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu 3.7 Low -
edk2Debian SMM IDT Privilege Escalation Vulnerability 7.0 High -
edk2Debian iSCSI Remote Memory Corruption and Denial of Service 6.3 Medium -
edk2Debian Out-of-bounds Read in HashPeImageByType() 4.6 Medium -
edk2Debian Potential iSCSI R2T PDU Vulnerability 3.5 Low -
edk2Debian Timing side-channel in ECDSA signature computation 4.6 Medium -
edk2Debian Integer overflow in PeCoffLoaderRelocateImage 5.9 Medium -
edk2Debian Integer Overflow caused by divide by zero during S3 suspension 6.0 Medium -
edk2Debian An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an... 6.7 Medium -
edk2Debian Buffer Overflow in EDK II Network Package 8.3 High -
edk2Debian Infinite loop in EDK II Network Package 7.5 High -
edk2Debian Infinite loop in EDK II Network Package 7.5 High -
edk2Debian Buffer Overflow in EDK II Network Package 8.3 High -
edk2Debian Use of a Weak PseudoRandom Number Generator in EDK II Network Package 5.3 Medium -
edk2Debian Predictable TCP ISNs in EDK II Network Package 5.8 Medium -
edk2Debian Out-of-Bounds Read in EDK II Network Package 6.5 Medium -
edk2Debian Buffer Overflow in EDK II Network Package 8.3 High -
edk2Debian Out-of-Bounds Read in EDK II Network Package 6.5 Medium -
edk2Debian Integer Overflow in CreateHob 7.0 High -
edk2Debian Heap Buffer Overflow in Tcg2MeasurePeImage 7.0 High -
edk2Debian Heap Buffer Overflow in Tcg2MeasureGptTable 7.0 High -
edk2Debian Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. 7.4 High -
edk2Debian A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty.... 7.5 High -
edk2Debian NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. 8.1 High -
edk2Debian BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting... 7.8 High -
edk2Debian Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to... 6.8 Medium -
edk2Debian Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. 7.5 High -
edk2Debian A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. 6.7 Medium -
edk2Debian An unlimited recursion in DxeCore in EDK II. 7.8 High -
edk2Debian Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to... 5.5 Medium -
edk2Debian Improper authentication in EDK II may allow a privileged user to potentially enable information... 4.9 Medium -
edk2Debian Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via... 6.5 Medium -
edk2Debian Use after free vulnerability in EDK II may allow an authenticated user to potentially enable... 8.0 High -
edk2Debian Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable... 7.8 High -
edk2Debian Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to... 7.8 High -
edk2Debian Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of... 7.8 High -
edk2Debian Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially... 7.5 High -
edk2Debian Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core... 5.7 Medium -
edk2Debian Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial... 5.5 Medium -
edk2Debian Improper configuration in system firmware for EDK II may allow unauthenticated user to... 7.8 High -
edk2Debian Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable... 6.8 Medium -
edk2Debian Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially... 8.7 High -
edk2Debian Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable... 6.0 Medium -
edk2Debian Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially... 8.8 High -
edk2Debian Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable... 9.1 Critical