Red Hat Security Advisory

RHSA-2024:8935

edk2 security update

Released 2024-11-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) edk2-20231122-6.el9_4.4, edk2-aarch64-20231122-6.el9_4.4, edk2-ovmf-20231122-6.el9_4.4
Red Hat Enterprise Linux CRB (v. 9) edk2-aarch64-20231122-6.el9_4.4, edk2-ovmf-20231122-6.el9_4.4, edk2-tools-20231122-6.el9_4.4 +1

Fixes 1 record

TI-2024-05670 CVE-2024-6119 · GHSA-7m4m-pwhv-49c5

Possible denial of service in X.509 name checks

HIGH 75

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.66582 Published 2024-09-03 Partial fix · 3.3.2, 3.2.3 +2 CWE-843