Security
فارسی
All products

Red Hat Enterprise Linux 7/ovmf

Red Hat · Package
60 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
openssl-src subject to Timing Oracle in RSA DecryptionCVE-2022-4304 · GHSA-P52G-CM5J-MJV4Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/openssl Rust / CargoRed Hat Medium Fix reported
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`CVE-2023-0215 · GHSA-R7JW-WP68-3XCHVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
Vulnerable OpenSSL included in cryptography wheelsCVE-2023-0286 · GHSA-X4QR-2FVF-3MR5Version ranges need review. openssl-srccryptography Rust / CargoPyPIRed Hat High Fix reported
Using a Custom Cipher with `NID_undef` may lead to NULL encryptionCVE-2022-3358 · GHSA-4F63-89W9-3JJVVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
AES OCB fails to encrypt some bytesCVE-2022-2097 · GHSA-3WX7-46CH-7RQ2Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/ovmf Rust / CargoRed Hat High Fix reported
Integer Overflow in openssl-srcCVE-2021-23840 · GHSA-QGM6-9472-PWQ7Version ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/management-ingress Rust / CargoRed Hat High Fix reported
Integer Overflow in openssl-srcCVE-2021-23841 · GHSA-84RM-QF37-FGC2Version ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/management-ingress Rust / CargoRed Hat Medium Fix reported
edk2: Insufficient input validation in MdeModulePkg may lead to privilege escalationCVE-2019-11098 Red Hat Enterprise Linux 7/ovmfRed Hat Enterprise Linux 8/edk2 Red Hat Medium No fix reported
edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLibCVE-2019-14563 Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
edk2: memory leak in ArpOnFrameRcvdDpcCVE-2019-14559 Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
edk2: DxeImageVerificationHandler() fails open in case of dbx signature checkCVE-2019-14575 Red Hat Enterprise Linux 7/ovmfRed Hat Enterprise Linux 8/edk2 Red Hat Medium No fix reported
edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()CVE-2019-14560 Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
edk2: NULL pointer dereference in AuthenticodeVerify()CVE-2019-14584 Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
edk2: unlimited FV recursion, round 2CVE-2021-28210 Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
edk2: possible heap corruption with LzmaUefiDecompressGetInfoCVE-2021-28211 Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxeCVE-2021-38575 Red Hat Enterprise Linux 7/ovmf Red Hat High No fix reported
edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalationCVE-2021-38578 Red Hat Enterprise Linux 7/ovmfRed Hat Enterprise Linux 8/edk2 Red Hat Medium No fix reported
openssl: c_rehash script allows command injectionCVE-2022-1292 Red Hat Enterprise Linux 6/openssl098eRed Hat Enterprise Linux 6/openssl Red Hat Medium No fix reported
openssl: the c_rehash script allows command injectionCVE-2022-2068 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/management-ingress-rhel8Red Hat Enterprise Linux 6/openssl098e Red Hat Medium No fix reported
openssl: Denial of service by excessive resource usage in verifying X509 policy constraintsCVE-2023-0464 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported