Summary
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.
Security Fix(es):
* edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | edk2-aarch64 | 20240524-6.el9_5.3 |
| AlmaLinux · 9 | edk2-ovmf | 20240524-6.el9_5.3 |
| AlmaLinux · 9 | edk2-tools | 20240524-6.el9_5.3 |
| AlmaLinux · 9 | edk2-tools-doc | 20240524-6.el9_5.3 |
Vulnerabilities 1
-
Medium 5.9
Integer overflow in PeCoffLoaderRelocateImage
EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availabil…