Security
فارسی
All products

Red Hat Enterprise Linux 8/edk2

Red Hat · Package
42 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Null pointer dereference in PKCS12 parsingCVE-2024-0727 · GHSA-9V9H-CGJ8-H64PVersion ranges need review. cryptographyRed Hat Enterprise Linux 6/openssl PyPIRed Hat Medium Fix reported
edk2: Insufficient input validation in MdeModulePkg may lead to privilege escalationCVE-2019-11098 Red Hat Enterprise Linux 7/ovmfRed Hat Enterprise Linux 8/edk2 Red Hat Medium No fix reported
edk2: DxeImageVerificationHandler integer overflow leads to endless loopCVE-2019-14562 Red Hat Enterprise Linux 8/edk2 Red Hat Low No fix reported
edk2: DxeImageVerificationHandler() fails open in case of dbx signature checkCVE-2019-14575 Red Hat Enterprise Linux 7/ovmfRed Hat Enterprise Linux 8/edk2 Red Hat Medium No fix reported
edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalationCVE-2021-38578 Red Hat Enterprise Linux 7/ovmfRed Hat Enterprise Linux 8/edk2 Red Hat Medium No fix reported
openssl: Possible DoS translating ASN.1 object identifiersCVE-2023-2650 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Unbounded memory growth with session handling in TLSv1.3CVE-2024-2511 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 8/compat-openssl10 Red Hat Low No fix reported
openssl: SSL_select_next_proto buffer overreadCVE-2024-5535 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Low-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Timing side-channel in ECDSA signature computationCVE-2024-13176 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
edk2: Out-of-bounds Read in EDK2CVE-2024-38797 Red Hat Enterprise Linux 8/edk2Red Hat Enterprise Linux 9/edk2 Red Hat Medium No fix reported
EDK2: EDK2: Information Disclosure and Privilege Escalation via Local BIOS AccessCVE-2024-38798 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 8/edk2 Red Hat Medium No fix reported
edk2: EDK2: Improper Input Validation allows arbitrary command executionCVE-2025-2296 Red Hat Enterprise Linux 8/edk2Red Hat Enterprise Linux 9/edk2 Red Hat High No fix reported
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verificationCVE-2026-22796 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processingCVE-2026-22795 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via malformed TimeStamp ResponseCVE-2025-69420 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processingCVE-2025-69421 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption callsCVE-2025-69418 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filterCVE-2025-68160 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncationCVE-2025-15469 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported