Search for packages
| purl | pkg:deb/debian/edk2@2022.11-6%2Bdeb12u2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-b7a9-w2fs-dbh7
Aliases: CVE-2024-38797 |
edk2: Out-of-bounds Read in EDK2 |
Affected by 1 other vulnerability. |
|
VCID-k7zd-s9nc-r3hb
Aliases: CVE-2025-3770 |
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability. |
Affected by 1 other vulnerability. |
|
VCID-mg21-k76s-sqfp
Aliases: CVE-2024-13176 |
openssl: Timing side-channel in ECDSA signature computation |
Affected by 1 other vulnerability. |
|
VCID-quq1-8rke-c3gf
Aliases: CVE-2023-45237 |
edk2: Use of a Weak PseudoRandom Number Generator |
Affected by 1 other vulnerability. |
|
VCID-r48c-b4df-ffhx
Aliases: CVE-2025-2295 |
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. |
Affected by 1 other vulnerability. |
|
VCID-sd4b-3g4z-mubq
Aliases: CVE-2025-2296 |
edk2: EDK2: Improper Input Validation allows arbitrary command execution |
Affected by 1 other vulnerability. |
|
VCID-z1gk-5f8t-tqau
Aliases: CVE-2023-45236 |
edk2: Predictable TCP Initial Sequence Numbers |
Affected by 1 other vulnerability. |
|
VCID-zd64-tjtu-sua3
Aliases: CVE-2024-38798 |
EDK2: EDK2: Information Disclosure and Privilege Escalation via Local BIOS Access |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-zwx2-8yhh-7yef
Aliases: CVE-2024-38805 |
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2atx-ce9g-tbds | edk2: Temporary DoS vulnerability |
CVE-2024-1298
|
| VCID-2nzx-2ymt-kuhv | edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe |
CVE-2021-38575
|
| VCID-5czu-f7hq-v3bf | edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message |
CVE-2023-45229
|
| VCID-9j1j-68kv-ufhn | EDK2: heap buffer overflow in Tcg2MeasureGptTable() |
CVE-2022-36763
|
| VCID-fxxz-zj2j-1qdz | edk2: Infinite loop when parsing a PadN option in the Destination Options header |
CVE-2023-45233
|
| VCID-h4uc-8m6s-ffhy | edk2: Infinite loop when parsing unknown options in the Destination Options header |
CVE-2023-45232
|
| VCID-ha36-4zhr-mfcu | edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message |
CVE-2023-45234
|
| VCID-hme1-vqbr-qydz | EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W |
CVE-2022-36765
|
| VCID-nqk5-vmve-d3cq | A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system. |
CVE-2021-38576
|
| VCID-pf73-medx-quet | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. |
CVE-2021-28216
|
| VCID-r575-k7j8-hbfy | edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation |
CVE-2021-38578
|
| VCID-u9mt-wbe7-yfb6 | edk2: Buffer overflow in the DHCPv6 client via a long Server ID option |
CVE-2023-45230
|
| VCID-v17c-bytr-6qe4 | edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message |
CVE-2023-45235
|
| VCID-vzd4-6nza-4bgx | edk2: Integer overflows in PeCoffLoaderRelocateImage |
CVE-2024-38796
|
| VCID-w7z8-86tz-87eb | edk2: Out of Bounds read when handling a ND Redirect message with truncated options |
CVE-2023-45231
|
| VCID-x5x7-rwjh-wbb7 | EDK2: heap buffer overflow in Tcg2MeasurePeImage() |
CVE-2022-36764
|