Red Hat Security AdvisoryRHSA-2024:5297
edk2 security update
Released 2024-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) edk2-20220126gitbb1bba3d77-13.el8_10.2, edk2-aarch64-20220126gitbb1bba3d77-13.el8_10.2, edk2-ovmf-20220126gitbb1bba3d77-13.el8_10.2
Fixes 3 records
Priority MEDIUM 60
EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00219 · Published 2024-05-30 · Fixed in edk2-stable202405 CWE-369
Priority MEDIUM 41
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00994 · Published 2024-01-16 · Fixed CWE-338
Priority MEDIUM 41
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00994 · Published 2024-01-16 · Fixed CWE-200
