发布于3月6日3月6日 Members Red Hat: CVE-2022-36763: EDK2: heap buffer overflow in Tcg2MeasureGptTable() (Multiple Advisories) Severity 5 CVSS (AV:L/AC:H/Au:S/C:P/I:P/A:C) Published 01/09/2024 Created 05/01/2024 Added 05/01/2024 Modified 09/03/2024 Description EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability. Solution(s) redhat-upgrade-edk2-aarch64 redhat-upgrade-edk2-debugsource redhat-upgrade-edk2-ovmf redhat-upgrade-edk2-tools redhat-upgrade-edk2-tools-debuginfo redhat-upgrade-edk2-tools-doc References CVE-2022-36763 RHSA-2024:2264 RHSA-2024:3017
参与讨论
你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。
注意:你的帖子需要版主批准后才能看到。