Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-38796

Опубликовано: 27 сент. 2024
Источник: redhat
CVSS3: 5.9
EPSS Низкий

Описание

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=2315390edk2: Integer overflows in PeCoffLoaderRelocateImage

EPSS

Процентиль: 16%
0.00051
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
ubuntu
9 месяцев назад

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

CVSS3: 5.9
nvd
9 месяцев назад

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

CVSS3: 5.9
msrc
30 дней назад

Описание отсутствует

CVSS3: 5.9
debian
9 месяцев назад

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An A ...

CVSS3: 5.9
redos
8 месяцев назад

Уязвимость edk2-tools

EPSS

Процентиль: 16%
0.00051
Низкий

5.9 Medium

CVSS3