Skip to content
OpenAdvisories
Medium ELSA-2024-11185 1 CVE

Moderate: edk2:20220126gitbb1bba3d77 security update (Oracle Linux 8)

Published Dec 17, 2024 · Updated Dec 17, 2024

Ecosystem: Oracle Linux

Summary

[20220126gitbb1bba3d77-13.el8.4]
- edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60830]
- Resolves: RHEL-60830
(CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z])

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 edk2-aarch64 0:20220126gitbb1bba3d77-13.el8_10.4
Oracle Linux · 8 edk2-ovmf 0:20220126gitbb1bba3d77-13.el8_10.4

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-38796

    Integer overflow in PeCoffLoaderRelocateImage

    EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availabil…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux