Skip to content
OpenAdvisories
Medium RHSA-2023:6330 2 CVEs

Red Hat Security Advisory: edk2 security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream edk2 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream edk2-aarch64 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream edk2-ovmf 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::crb edk2-aarch64 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::crb edk2-debugsource 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::crb edk2-ovmf 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::crb edk2-tools 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::crb edk2-tools-debuginfo 0:20230524-3.el9
Red Hat · RHEL 9 enterprise_linux:9::crb edk2-tools-doc 0:20230524-3.el9

Vulnerabilities 2

  • Medium 6.5
    CVE-2023-2650 EPSS 75%

    Possible DoS translating ASN.1 object identifiers

    Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Unscored —
    CVE-2019-14560 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1858038
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2055123
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2124143
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2174749
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2176920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2186754
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2189136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2203094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2207947
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2211060
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2218196
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6330.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-14560
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-14560
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-14560
  • report
    https://access.redhat.com/security/cve/CVE-2023-2650
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-2650
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-2650
  • article
    https://www.openssl.org/news/secadv/20230530.txt