edk2 vulnerabilities (openEuler)
78 vulnerabilities.
-
edk2openEuler Invalid Pointer Dereference in CMP Server via Crafted protectionAlg 7.5 High -
edk2openEuler Heap Buffer Overflow in CMS Key Unwrapping 7.5 High -
edk2openEuler Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
edk2openEuler Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
edk2openEuler AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
edk2openEuler FFC-DH Peer Validation Uses Attacker-Supplied q 3.7 Low -
edk2openEuler Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 3.7 Low -
edk2openEuler NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
edk2openEuler Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
edk2openEuler CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
edk2openEuler Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
edk2openEuler Incorrect Failure Handling in RSA KEM RSASVE Encapsulation 7.5 High -
edk2openEuler Heap Buffer Overflow in Hexadecimal Conversion 9.8 Critical -
edk2openEuler Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
edk2openEuler Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo 7.5 High -
edk2openEuler NULL Pointer Dereference When Processing a Delta CRL 7.5 High -
edk2openEuler Potential Use-after-free in DANE Client Code 8.1 High -
edk2openEuler ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function 5.3 Medium -
edk2openEuler Missing ASN1_TYPE validation in PKCS#12 parsing 5.5 Medium -
edk2openEuler NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
edk2openEuler Missing ASN1_TYPE validation in TS_RESP_verify_response() function 7.5 High -
edk2openEuler Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High -
edk2openEuler Unauthenticated/unencrypted trailing bytes with low-level OCB function calls 4.0 Medium -
edk2openEuler Heap out-of-bounds write in BIO_f_linebuffer on short writes 4.7 Medium -
edk2openEuler Stack buffer overflow in CMS (Auth)EnvelopedData parsing 8.8 High -
edk2openEuler Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege 5.8 Medium -
edk2openEuler Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
edk2openEuler SMM IDT Privilege Escalation Vulnerability 7.0 High -
edk2openEuler iSCSI Remote Memory Corruption and Denial of Service 6.3 Medium -
edk2openEuler Out-of-bounds Read in HashPeImageByType() 4.6 Medium -
edk2openEuler Potential iSCSI R2T PDU Vulnerability 3.5 Low -
edk2openEuler Timing side-channel in ECDSA signature computation 4.6 Medium -
edk2openEuler Low-level invalid GF(2^m) parameters lead to OOB memory access 8.8 High -
edk2openEuler Integer overflow in PeCoffLoaderRelocateImage 5.9 Medium -
edk2openEuler Possible denial of service in X.509 name checks 7.5 High -
edk2openEuler Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an... 7.5 High -
edk2openEuler SSL_select_next_proto buffer overread 9.1 Critical -
edk2openEuler Integer Overflow caused by divide by zero during S3 suspension 6.0 Medium -
edk2openEuler Use After Free with SSL_free_buffers 9.8 Critical -
edk2openEuler Excessive time spent checking DSA keys and parameters 5.3 Medium -
edk2openEuler Unbounded memory growth with session handling in TLSv1.3 5.9 Medium -
edk2openEuler An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS... 6.7 Medium -
edk2openEuler PKCS12 Decoding crashes 5.5 Medium -
edk2openEuler Buffer Overflow in EDK II Network Package 8.3 High -
edk2openEuler Infinite loop in EDK II Network Package 7.5 High -
edk2openEuler Infinite loop in EDK II Network Package 7.5 High -
edk2openEuler Buffer Overflow in EDK II Network Package 8.3 High -
edk2openEuler Use of a Weak PseudoRandom Number Generator in EDK II Network Package 5.3 Medium -
edk2openEuler Predictable TCP ISNs in EDK II Network Package 5.8 Medium -
edk2openEuler Out-of-Bounds Read in EDK II Network Package 6.5 Medium - Show olderLoading…