edk2 vulnerabilities (Ubuntu)
142 vulnerabilities.
edk2UbuntuTLS 1.3 CompressedCertificate excessive memory allocation5.9 Mediumedk2UbuntuStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 Highedk2UbuntuUn-verified kernel bypass Secure Boot mechanism in direct boot mode8.4 Highedk2UbuntuUncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege5.8 Mediumedk2Ubuntuedk2 regressionNo scoreedk2UbuntuUEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu3.7 Lowedk2UbuntuOut-of-bounds read in HTTP client no_proxy handling5.9 Mediumedk2UbuntuSMM IDT Privilege Escalation Vulnerability7.0 Highedk2UbuntuiSCSI Remote Memory Corruption and Denial of Service6.3 Mediumedk2UbuntuOut-of-bounds Read in HashPeImageByType()4.6 Mediumedk2UbuntuPotential iSCSI R2T PDU Vulnerability3.5 Lowedk2UbuntuTiming side-channel in ECDSA signature computation4.6 Mediumedk2UbuntuLow-level invalid GF(2^m) parameters lead to OOB memory access8.8 Highedk2UbuntuInteger overflow in PeCoffLoaderRelocateImage5.9 Mediumedk2UbuntuPossible denial of service in X.509 name checks7.5 Highedk2UbuntuSSL_select_next_proto buffer overread9.1 Criticaledk2UbuntuInteger Overflow caused by divide by zero during S3 suspension6.0 Mediumedk2UbuntuUse After Free with SSL_free_buffers9.8 Criticaledk2UbuntuUnbounded memory growth with session handling in TLSv1.35.9 Mediumedk2UbuntuAn insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...6.7 Mediumedk2UbuntuPKCS12 Decoding crashes5.5 Mediumedk2UbuntuBuffer Overflow in EDK II Network Package8.3 Highedk2UbuntuInfinite loop in EDK II Network Package7.5 Highedk2UbuntuInfinite loop in EDK II Network Package7.5 Highedk2UbuntuBuffer Overflow in EDK II Network Package8.3 Highedk2UbuntuUse of a Weak PseudoRandom Number Generator in EDK II Network Package5.3 Mediumedk2UbuntuPredictable TCP ISNs in EDK II Network Package5.8 Mediumedk2UbuntuOut-of-Bounds Read in EDK II Network Package6.5 Mediumedk2UbuntuBuffer Overflow in EDK II Network Package8.3 Highedk2UbuntuOut-of-Bounds Read in EDK II Network Package6.5 Mediumedk2UbuntuExcessive time spent checking invalid RSA public keys5.9 Mediumedk2UbuntuInteger Overflow in CreateHob7.0 Highedk2UbuntuHeap Buffer Overflow in Tcg2MeasurePeImage7.0 Highedk2UbuntuHeap Buffer Overflow in Tcg2MeasureGptTable7.0 Highedk2UbuntuExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumedk2UbuntuExcessive time spent checking DH q parameter value5.3 Mediumedk2UbuntuExcessive time spent checking DH keys and parameters5.3 Mediumedk2UbuntuPossible DoS translating ASN.1 object identifiers6.5 Mediumedk2UbuntuCertificate policy check not enabled5.3 Mediumedk2UbuntuInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumedk2UbuntuExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highedk2UbuntuX.400 address type confusion in X.509 GeneralName7.4 Highedk2UbuntuUse-after-free following BIO_new_NDEF7.5 Highedk2UbuntuDouble free after calling PEM_read_bio_ex7.5 Highedk2UbuntuTiming Oracle in RSA Decryption5.9 Mediumedk2UbuntuX.509 Policy Constraints Double Locking7.5 Highedk2UbuntuUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 Highedk2UbuntuAES OCB fails to encrypt some bytes5.3 Mediumedk2UbuntuRSA implementation bug in AVX512IFMA instructions9.8 Criticaledk2UbuntuThe c_rehash script allows command injection7.3 High- Show moreLoading…