Release Date: | 2024-01-09 |
EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.
See more information about CVE-2022-36765 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v3.1 metrics and score provided are preliminary and subject to review.
Base Score: | 7 | CVSS Vector: | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H |
Attack Vector: | Local network | Attack Complexity: | High |
Privileges Required: | Low | User Interaction: | None |
Scope: | Changed | Confidentiality Impact: | Low |
Integrity Impact: | Low | Availability Impact: | High |
Platform | Errata | Release Date |
Oracle Linux version 7 (edk2) | ELSA-2024-12408 | 2024-06-04 |
Oracle Linux version 8 (edk2) | ELSA-2024-12343 | 2024-04-24 |
Oracle Linux version 8 (edk2) | ELSA-2024-20865 | 2024-04-24 |
Oracle Linux version 8 (edk2) | ELSA-2024-3017 | 2024-05-23 |
Oracle Linux version 9 (edk2) | ELSA-2024-12409 | 2024-06-03 |
Oracle Linux version 9 (edk2) | ELSA-2024-23120 | 2024-06-03 |
Oracle Linux version 9 (edk2) | ELSA-2024-4749 | 2024-07-24 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections: