CVE-2024-38797
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-38797
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-38797.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-38797
- Aliases
-
- GHSA-4wjw-6xmf-44xf
- Related
- Published
- 2025-04-07T18:15:45Z
- Modified
- 2025-04-08T18:49:51.312744Z
- Summary
- [none]
- Details
-
EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability.
- References
Affected packages
Debian:11 / edk2
Package
- Name
- edk2
- Purl
- pkg:deb/debian/edk2?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
2020.*
2020.11-2
2020.11-2+deb11u1
2020.11-2+deb11u2
2020.11-3
2020.11-4
2020.11-5
2021.*
2021.02-1
2021.05-1
2021.08~rc0-1
2021.08~rc0-2
2021.08-1
2021.08-2
2021.08-3
2021.11~rc1-1
2021.11-1
2021.11-2
2022.*
2022.02~rc1-1
2022.02-1
2022.02-2
2022.02-3
2022.05~rc1-1
2022.05-1
2022.05-2
2022.05-3
2022.05-4
2022.08-1
2022.11-1
2022.11-2
2022.11-3
2022.11-4
2022.11-5
2022.11-6
2023.*
2023.02-1
2023.02-2
2023.05-1
2023.05-2
2023.08-1
2023.11-1
2023.11-2
2023.11-3
2023.11-4
2023.11-5
2023.11-6
2023.11-7
2023.11-8
2024.*
2024.02-1
2024.02-2
2024.05-1
2024.05-2
2024.08-1
2024.08-2
2024.08-3
2024.08-4
2024.11-1
2024.11-2
2024.11-3
2024.11-4
2024.11-5
2025.*
2025.02-1
2025.02-2
2025.02-3
2025.02-4
2025.02-5
Debian:12 / edk2
Package
- Name
- edk2
- Purl
- pkg:deb/debian/edk2?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
2022.*
2022.11-6
2022.11-6+deb12u1
2022.11-6+deb12u2
2023.*
2023.02-1
2023.02-2
2023.05-1
2023.05-2
2023.08-1
2023.11-1
2023.11-2
2023.11-3
2023.11-4
2023.11-5
2023.11-6
2023.11-7
2023.11-8
2024.*
2024.02-1
2024.02-2
2024.05-1
2024.05-2
2024.08-1
2024.08-2
2024.08-3
2024.08-4
2024.11-1
2024.11-2
2024.11-3
2024.11-4
2024.11-5
2025.*
2025.02-1
2025.02-2
2025.02-3
2025.02-4
2025.02-5
Debian:13 / edk2
Package
- Name
- edk2
- Purl
- pkg:deb/debian/edk2?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
2022.*
2022.11-6
2023.*
2023.02-1
2023.02-2
2023.05-1
2023.05-2
2023.08-1
2023.11-1
2023.11-2
2023.11-3
2023.11-4
2023.11-5
2023.11-6
2023.11-7
2023.11-8
2024.*
2024.02-1
2024.02-2
2024.05-1
2024.05-2
2024.08-1
2024.08-2
2024.08-3
2024.08-4
2024.11-1
2024.11-2
2024.11-3
2024.11-4
2024.11-5
2025.*
2025.02-1
2025.02-2
2025.02-3
2025.02-4
2025.02-5