AZL-58828

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58828.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-58828

Upstream

CVE-2025-2295

Published

2025-03-14T22:15:11Z

Modified

2026-04-01T05:19:21.854114Z

Summary

CVE-2025-2295 affecting package hvloader for versions less than 1.0.1-16

Details

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-2295

Affected packages

Azure Linux:2 / hvloader

Package

Name: hvloader
Purl: pkg:rpm/azure-linux/hvloader

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.1-16

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58828.json"