Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/edk2@20231122-6.el9_4?arch=2
purl pkg:rpm/redhat/edk2@20231122-6.el9_4?arch=2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-hme1-vqbr-qydz
Aliases:
CVE-2022-36765
EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W There are no reported fixed by versions.
VCID-quq1-8rke-c3gf
Aliases:
CVE-2023-45237
edk2: Use of a Weak PseudoRandom Number Generator There are no reported fixed by versions.
VCID-z1gk-5f8t-tqau
Aliases:
CVE-2023-45236
edk2: Predictable TCP Initial Sequence Numbers There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:50:28.701438+00:00 RedHat Importer Affected by VCID-hme1-vqbr-qydz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-36765.json 38.0.0
2026-04-01T13:50:25.670015+00:00 RedHat Importer Affected by VCID-quq1-8rke-c3gf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45237.json 38.0.0
2026-04-01T13:50:25.601527+00:00 RedHat Importer Affected by VCID-z1gk-5f8t-tqau https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45236.json 38.0.0