Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der EDK2 NetworkPkg IP stack implementation ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand auszulösen.
[UPDATE] [hoch] EDK2 NetworkPkg IP stack implementation: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-07-10 07:21 UTC
- Importiert: 2026-07-13 08:29 UTC
- CVSS: 8.3
- Quelle-ID:
cert_bund - uid_hash:
6adee73db86ad0000dde523fd44c53e7eb1bdb8f3599475fd6a48a4b3cb43f5d
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.3 |
MEDIUM |
6.5 |
2024-01-16 |
|||
HIGH |
8.3 |
HIGH |
8.3 |
2024-01-16 |
|||
HIGH |
8.3 |
MEDIUM |
6.5 |
2024-01-16 |
|||
HIGH |
8.3 |
HIGH |
7.5 |
2024-01-16 |
|||
HIGH |
8.3 |
HIGH |
7.5 |
2024-01-16 |
|||
HIGH |
8.3 |
HIGH |
8.3 |
2024-01-16 |
|||
HIGH |
8.3 |
HIGH |
8.3 |
2024-01-16 |
|||
HIGH |
8.3 |
MEDIUM |
5.8 |
2024-01-16 |
|||
HIGH |
8.3 |
MEDIUM |
5.3 |
2024-01-16 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
Oracle Linux Security Advisory ELSA-2024-12794 vom 2024-10-21 |
EXTERNAL | - | wid_csaf |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
Amazon Linux Security Advisory ALAS-2024-2483 vom 2024-03-05 |
EXTERNAL | - | wid_csaf |
Amazon Linux Security Advisory ALAS-2024-2722 vom 2024-12-20 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
Fedora Security Advisory FEDORA-2024-A9DEAD34C5 vom 2024-02-26 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
Oracle Linux Security Advisory ELSA-2024-1063 vom 2024-03-06 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-1075 vom 2024-03-08 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-12343 vom 2024-04-25 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-12408 vom 2024-06-05 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-12409 vom 2024-06-04 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-12793 vom 2024-10-21 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-12842 vom 2024-11-25 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-20865 vom 2024-04-25 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-23120 vom 2024-06-04 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-4749 vom 2024-07-25 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2024-5297 vom 2024-08-14 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-36721 vom 2026-07-09 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |