edk2 vulnerabilities (Red Hat)
42 vulnerabilities.
-
edk2Red Hat Incorrect Failure Handling in RSA KEM RSASVE Encapsulation 7.5 High -
edk2Red Hat Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
edk2Red Hat Un-verified kernel bypass Secure Boot mechanism in direct boot mode 8.4 High -
edk2Red Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
edk2Red Hat Integer overflow in PeCoffLoaderRelocateImage 5.9 Medium -
edk2Red Hat Possible denial of service in X.509 name checks 7.5 High -
edk2Red Hat Integer Overflow caused by divide by zero during S3 suspension 6.0 Medium -
edk2Red Hat PKCS12 Decoding crashes 5.5 Medium -
edk2Red Hat Buffer Overflow in EDK II Network Package 8.3 High -
edk2Red Hat Infinite loop in EDK II Network Package 7.5 High -
edk2Red Hat Infinite loop in EDK II Network Package 7.5 High -
edk2Red Hat Buffer Overflow in EDK II Network Package 8.3 High -
edk2Red Hat Use of a Weak PseudoRandom Number Generator in EDK II Network Package 5.3 Medium -
edk2Red Hat Predictable TCP ISNs in EDK II Network Package 5.8 Medium -
edk2Red Hat Out-of-Bounds Read in EDK II Network Package 6.5 Medium -
edk2Red Hat Buffer Overflow in EDK II Network Package 8.3 High -
edk2Red Hat Out-of-Bounds Read in EDK II Network Package 6.5 Medium -
edk2Red Hat Excessive time spent checking invalid RSA public keys 5.9 Medium -
edk2Red Hat POLY1305 MAC implementation corrupts vector registers on PowerPC 6.5 Medium -
edk2Red Hat Integer Overflow in CreateHob 7.0 High -
edk2Red Hat Heap Buffer Overflow in Tcg2MeasurePeImage 7.0 High -
edk2Red Hat Heap Buffer Overflow in Tcg2MeasureGptTable 7.0 High -
edk2Red Hat Excessive time spent checking DH keys and parameters 5.3 Medium -
edk2Red Hat Possible DoS translating ASN.1 object identifiers 6.5 Medium -
edk2Red Hat Moderate: edk2 security, bug fix, and enhancement update 6.5 Medium -
edk2Red Hat X.400 address type confusion in X.509 GeneralName 7.4 High -
edk2Red Hat Use-after-free following BIO_new_NDEF 7.5 High -
edk2Red Hat Double free after calling PEM_read_bio_ex 7.5 High -
edk2Red Hat Timing Oracle in RSA Decryption 5.9 Medium -
edk2Red Hat Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. 7.4 High -
edk2Red Hat NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. 8.1 High -
edk2Red Hat A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. 6.7 Medium -
edk2Red Hat An unlimited recursion in DxeCore in EDK II. 7.8 High -
edk2Red Hat Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
edk2Red Hat Integer overflow in CipherUpdate 7.5 High -
edk2Red Hat Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable... 7.8 High -
edk2Red Hat Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of... 7.8 High -
edk2Red Hat Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially... 7.5 High -
edk2Red Hat Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial... 5.5 Medium -
edk2Red Hat Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially... 8.7 High -
edk2Red Hat Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable... 6.0 Medium -
edk2Red Hat Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially... 8.8 High