TI-2023-00271 CVE-2023-0286 · GHSA-x4qr-2fvf-3mr5
X.400 address type confusion in X.509 GeneralName
Priority HIGH 70
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.
RHSA-2023:2165
edk2 security, bug fix, and enhancement update
Released 2023-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) edk2-20221207gitfff6d81270b5-9.el9_2, edk2-aarch64-20221207gitfff6d81270b5-9.el9_2, edk2-ovmf-20221207gitfff6d81270b5-9.el9_2
- Red Hat Enterprise Linux CRB (v. 9) edk2-aarch64-20221207gitfff6d81270b5-9.el9_2, edk2-ovmf-20221207gitfff6d81270b5-9.el9_2, edk2-tools-20221207gitfff6d81270b5-9.el9_2 +1
Fixes 5 records
TI-2022-04067 CVE-2022-4450 · GHSA-v5w6-wcm8-jm4q
Double free after calling PEM_read_bio_ex
Priority MEDIUM 62
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.
TI-2023-00208 CVE-2023-0215 · GHSA-r7jw-wp68-3xch
Use-after-free following BIO_new_NDEF
Priority MEDIUM 47
The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.
TI-2022-03942 CVE-2022-4304 · GHSA-p52g-cm5j-mjv4
Timing Oracle in RSA Decryption
Priority MEDIUM 47
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.
TI-2021-16172 CVE-2021-38578 · GHSA-grqq-3jqg-g95p
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
Priority MEDIUM 45
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.