Search for packages
| purl | pkg:deb/debian/edk2@2025.02-8%2Bdeb13u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zd64-tjtu-sua3
Aliases: CVE-2024-38798 |
EDK2: EDK2: Information Disclosure and Privilege Escalation via Local BIOS Access |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-b7a9-w2fs-dbh7 | edk2: Out-of-bounds Read in EDK2 |
CVE-2024-38797
|
| VCID-k7zd-s9nc-r3hb | EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability. |
CVE-2025-3770
|
| VCID-mg21-k76s-sqfp | openssl: Timing side-channel in ECDSA signature computation |
CVE-2024-13176
|
| VCID-quq1-8rke-c3gf | edk2: Use of a Weak PseudoRandom Number Generator |
CVE-2023-45237
|
| VCID-r48c-b4df-ffhx | EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. |
CVE-2025-2295
|
| VCID-sd4b-3g4z-mubq | edk2: EDK2: Improper Input Validation allows arbitrary command execution |
CVE-2025-2296
|
| VCID-z1gk-5f8t-tqau | edk2: Predictable TCP Initial Sequence Numbers |
CVE-2023-45236
|
| VCID-zwx2-8yhh-7yef | EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. |
CVE-2024-38805
|