Skip to content
OpenAdvisories
Low ALAS2-2025-2824 1 CVE

Low: edk2 security update (Amazon Linux 2)

Published Apr 9, 2025 · Updated Apr 16, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-2295: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2 edk2-aarch64 0:20240813-300.amzn2
Amazon Linux · 2 edk2-debuginfo 0:20240813-300.amzn2
Amazon Linux · 2 edk2-ovmf 0:20240813-300.amzn2
Amazon Linux · 2 edk2-tools 0:20240813-300.amzn2
Amazon Linux · 2 edk2-tools-doc 0:20240813-300.amzn2

Vulnerabilities 1

  • Low 3.5
    CVE-2025-2295

    Potential iSCSI R2T PDU Vulnerability

    EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-2295.html