edk2 vulnerabilities (Ubuntu)
142 vulnerabilities.
edk2UbuntuResource leakage when decoding certificates and keys7.5 Highedk2UbuntuIncorrect MAC key used in the RC4-MD5 ciphersuite5.9 Mediumedk2UbuntuThe c_rehash script allows command injection7.3 Highedk2UbuntuInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highedk2UbuntuExisting CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.7.4 Highedk2UbuntuBN_mod_exp may produce incorrect results on MIPS5.9 Mediumedk2UbuntuA BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty....7.5 Highedk2UbuntuRead buffer overruns processing ASN.1 strings7.4 Highedk2UbuntuNetworkPkg/IScsiDxe has remotely exploitable buffer overflows.8.1 Highedk2UbuntuBootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...7.8 Highedk2UbuntuInsufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to...6.8 Mediumedk2UbuntuExample EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.7.5 Highedk2UbuntuA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.6.7 Mediumedk2UbuntuAn unlimited recursion in DxeCore in EDK II.7.8 Highedk2UbuntuInteger overflow in CipherUpdate7.5 Highedk2UbuntuInteger overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to...5.5 Mediumedk2UbuntuRaccoon attack3.7 Lowedk2UbuntuImproper authentication in EDK II may allow a privileged user to potentially enable information...4.9 Mediumedk2UbuntuLogic issue EDK II may allow an unauthenticated user to potentially enable denial of service via...6.5 Mediumedk2UbuntuUse after free vulnerability in EDK II may allow an authenticated user to potentially enable...8.0 Highedk2UbuntuNull pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable...7.8 Highedk2UbuntuLogic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to...7.8 Highedk2UbuntuInteger truncation in EDK II may allow an authenticated user to potentially enable escalation of...7.8 Highedk2UbuntuUncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially...7.5 Highedk2UbuntuInsufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core...5.7 Mediumedk2UbuntuPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Lowedk2UbuntuStack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial...5.5 Mediumedk2UbuntuInsufficient memory write check in SMM service for EDK II may allow an authenticated user to...6.7 Mediumedk2UbuntuStack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable...6.8 Mediumedk2UbuntuBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...8.7 Highedk2UbuntuStack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable...6.0 Mediumedk2UbuntuBuffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially...8.8 Highedk2UbuntuBuffer overflow in network stack for EDK II may allow unprivileged user to potentially enable...9.1 Criticaledk2UbuntuLogic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an...7.8 Highedk2UbuntuRed Hat Security Advisory: ovmf security and enhancement update7.8 High