Red Hat Security Advisory

RHSA-2023:4252

edk2 security update

Released 2023-07-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) edk2-20200602gitca407c7246bf-4.el8_4.3, edk2-ovmf-20200602gitca407c7246bf-4.el8_4.3
Red Hat Enterprise Linux AppStream E4S (v.8.4) edk2-20200602gitca407c7246bf-4.el8_4.3, edk2-aarch64-20200602gitca407c7246bf-4.el8_4.3, edk2-ovmf-20200602gitca407c7246bf-4.el8_4.3
Red Hat Enterprise Linux AppStream TUS (v.8.4) edk2-20200602gitca407c7246bf-4.el8_4.3, edk2-ovmf-20200602gitca407c7246bf-4.el8_4.3

TI-2023-00271 CVE-2023-0286 · GHSA-x4qr-2fvf-3mr5

HIGH 70

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.69286 Published 2023-02-08 Partial fix · 3.0.8, 1.1.1t +4 CWE-843