Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:4128
HistoryJul 18, 2023 - 7:19 a.m.

(RHSA-2023:4128) Important: edk2 security update

2023-07-1807:19:33
access.redhat.com
16
embedded development kit
uefi support
virtual machines
openssl
x.400 address type confusion
rsa decryption
use-after-free
cvss score
cve

0.004 Low

EPSS

Percentile

72.5%

JSON

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

  • openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)

  • openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)

  • openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchedk2-ovmf< 20220126gitbb1bba3d77-2.el8_6.1edk2-ovmf-20220126gitbb1bba3d77-2.el8_6.1.noarch.rpm
RedHat8noarchedk2-aarch64< 20220126gitbb1bba3d77-2.el8_6.1edk2-aarch64-20220126gitbb1bba3d77-2.el8_6.1.noarch.rpm

Related

nessus 69
openvas 43
ibm 27
amazon 3
altlinux 2
oraclelinux 10
freebsd 2
freebsd_advisory 1
ics 3
redhat 8
almalinux 3
fedora 2
rocky 1
osv 9
slackware 1
ubuntu 3
cloudlinux 1
cloudfoundry 2
debian 2
photon 1
redos 1
alpinelinux 1
prion 1
cvelist 1
github 1
debiancve 1
nessus
nessus
SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2023:0308-1)
2023-02-08 00:00:00
RHEL 8 : edk2 (RHSA-2023:4128)
2023-07-18 00:00:00
SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2023:0306-1)
2023-02-08 00:00:00
openvas
openvas
openSUSE: Security Advisory for openssl (SUSE-SU-2023:0305-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0305-1)
2023-02-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0308-1)
2023-02-08 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilites in OpenSSL may affect IBM Spectrum Protect Backup-Archive Client NetApp Services (CVE-2022-4304, CVE-2023-0215, CVE-2023-0286)
2023-03-23 14:47:43
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OpenSSL
2023-05-02 15:23:43
Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities
2023-03-07 16:55:34
amazon
amazon
Important: openssl
2023-02-03 23:39:00
Important: openssl
2023-02-03 19:19:00
Important: openssl11
2023-02-03 19:19:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1
2023-02-20 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1
2023-02-10 00:00:00
oraclelinux
oraclelinux
edk2 security update
2023-05-24 00:00:00
edk2 security update
2023-12-07 00:00:00
edk2 security update
2023-12-06 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in OpenSSL
2023-02-16 00:00:00
OpenSSL -- Multiple vulnerabilities
2023-02-07 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:03.openssl
2023-02-16 00:00:00
ics
ics
Siemens SCALANCE W1750D Devices
2023-03-16 12:00:00
Hitachi Energy Lumada APM Edge
2023-09-12 12:00:00
Mitsubishi Electric Factory Automation Products
2024-01-04 12:00:00
redhat
redhat
(RHSA-2023:3420) Important: Red Hat JBoss Web Server 5.7.3 release and security update
2023-06-05 13:52:35
(RHSA-2023:1405) Important: openssl security update
2023-03-22 10:18:26
(RHSA-2023:2932) Important: edk2 security update
2023-05-16 05:58:27
almalinux
almalinux
Important: openssl security update
2023-03-22 00:00:00
Important: edk2 security update
2023-05-16 00:00:00
Important: edk2 security, bug fix, and enhancement update
2023-05-09 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: edk2-20221117gitfff6d81270b5-14.fc36
2023-03-05 00:54:06
[SECURITY] Fedora 37 Update: edk2-20221117gitfff6d81270b5-13.fc37
2023-02-16 02:06:48
rocky
rocky
openssl security update
2023-03-28 13:07:30
osv
osv
Important: edk2 security update
2023-05-16 00:00:00
Important: openssl security update
2023-03-22 00:00:00
Important: openssl security update
2023-03-28 13:07:30
slackware
slackware
[slackware-security] openssl
2023-02-07 20:57:57
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-02-07 00:00:00
OpenSSL vulnerabilities
2023-02-07 00:00:00
Node.js vulnerabilities
2024-01-03 00:00:00
cloudlinux
cloudlinux
openssl: Fix of 2 CVEs
2023-02-10 10:39:56
cloudfoundry
cloudfoundry
USN-5845-1: OpenSSL vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
USN-5844-1: OpenSSL vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
debian
debian
[SECURITY] [DLA 3325-1] openssl security update
2023-02-20 11:11:21
[SECURITY] [DSA 5343-1] openssl security update
2023-02-07 21:05:48
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0530
2023-02-10 00:00:00
redos
redos
ROS-20230418-05
2023-04-18 00:00:00
alpinelinux
alpinelinux
CVE-2022-4304
2023-02-08 20:15:23
prion
prion
Design/Logic Flaw
2023-02-08 20:15:00
cvelist
cvelist
CVE-2022-4304 Timing Oracle in RSA Decryption
2023-02-08 19:04:28
github
github
openssl-src subject to Timing Oracle in RSA Decryption
2023-02-08 22:31:42
debiancve
debiancve
CVE-2022-4304
2023-02-08 20:15:23

0.004 Low

EPSS

Percentile

72.5%

JSON
Related for RHSA-2023:4128
nessus69openvas43ibm27amazon3altlinux2oraclelinux10freebsd2freebsd_advisory1ics3redhat8almalinux3fedora2rocky1osv9slackware1ubuntu3cloudlinux1cloudfoundry2debian2photon1redos1alpinelinux1prion1cvelist1github1debiancve1