According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability.(CVE-2022-36763)

    EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability.(CVE-2022-36764)

    EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer     overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result     in a compromise of confidentiality, integrity, and/or availability.(CVE-2022-36765)

    EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in     DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and     potentially lead to a loss of Confidentiality, Integrity and/or Availability.(CVE-2023-45230)

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor     Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access     and potentially lead to a loss of Confidentiality.(CVE-2023-45231)

    EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in     the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Availability.(CVE-2023-45232)

    EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the     Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Availability.(CVE-2023-45233)

    EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or     Availability.(CVE-2023-45234)

    EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option     from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or     Availability.(CVE-2023-45235)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization edk2 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0190 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2022-36763:
    A heap buffer overflow flaw was found via the Tcg2MeasureGptTable() function in EDK2, arising from     inadequate validation of the GPT Primary Header, presenting a minor risk to confidentiality and integrity.
    The primary consequence is likely a crash or denial of service. This issue may allow a local attacker to     craft a GPT table, causing an integer overflow and consequent buffer overflow.

    CVE-2022-36764:
    A heap-based buffer overflow flaw was found via the Tcg2MeasurePeImage() function in EDK2. Successful     exploitation requires a local attacker to trigger an integer overflow in the calculation of the EventSize     variable at DxeTpm2MeasureBootLib.c, leading to the heap-buffer overflow, presenting a moderate risk to     confidentiality and integrity. However, the primary consequence is likely a crash or denial of service.

    CVE-2022-36765:
    A flaw was found in the CreateHob() function in EDK2. An attacker, leveraging a local network, can     initiate an integer overflow leading to a buffer overflow. This issue arises during size alignment within     the CreateHob() function, requiring activation in the PEI phase. Successful exploitation of this flaw     poses a moderate threat to confidentiality and integrity, however, the primary consequence is likely a     crash or denial of service.

    CVE-2023-45229:
    A vulnerability has been identified in the NetworkPkg IP stack of EDK2, the open-source reference     implementation of the UEFI specification. This flaw enables an unauthenticated attacker within the same     network vicinity to transmit a specifically crafted DHCPv6 message. Exploiting this vulnerability may     result in unauthorized access to memory beyond its boundaries, potentially leading to the exposure of     sensitive information.

    CVE-2023-45231:
    A security loophole involving an out-of-bounds read was identified in EDK2, the open-source reference     implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the     vicinity of the network to transmit a specifically crafted Neighbor Discovery Redirect message.
    Consequently, this may lead to the unauthorized reading of memory beyond the message boundaries,     potentially resulting in the exposure of sensitive information.

    CVE-2023-45232:
    A security loophole involving an infinite loop was identified in EDK2, the open-source reference     implementation of the UEFI specification. This weakness enables an unauthorized attacker to exploit system     availability by sending a specifically crafted Destination Options IPv6 header.

    CVE-2023-45233:
    The Network Package in EDK2 is vulnerable to an infinite loop exploit when parsing a PadN option within     the Destination Options header of IPv6. This flaw allows an unauthorized attacker to gain access and     potentially result in a loss of system availability.

    CVE-2023-45235:
    A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation     of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network     to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the disclosure of     information and potential compromise of system availability.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0752-1 advisory.

    - CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise     messages.
      (bsc#1218879)
    - CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. (bsc#1218880)
    - CVE-2023-45231: out-of-bounds read in edk2 when handling a ND Redirect message with truncated options.
    (bsc#1218881)
    - CVE-2023-45232: infinite loop in edk2 when parsing unknown options in the Destination Options header.
    (bsc#1218882)
    - CVE-2023-45233: infinite loop in edk2 when parsing PadN options in the Destination Options header.
    (bsc#1218883)
    - CVE-2023-45234: buffer overflow in edk2 when processing DNS Servers options in a DHCPv6 Advertise     message.
      (bsc#1218884)
    - CVE-2023-45235: buffer overflow in edk2 when handling the Server ID option in a DHCPv6 proxy Advertise     message.
      (bsc#1218885)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3017 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message     (CVE-2023-45235)

    * EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)

    * EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)

    * EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)

    * edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message     (CVE-2023-45229)

    * edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)

    * edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)

    * edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3017 advisory.

    - Resolves: RHEL-21158       (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])
    - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846     RHEL-21848 RHEL-21850 RHEL-21852]
    - Resolves: RHEL-21840       (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise     message [rhel-8])
    - Resolves: RHEL-21844       (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options     [rhel-8])
    - Resolves: RHEL-21846       (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header     [rhel-8])
    - Resolves: RHEL-21848       (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header     [rhel-8])
    - Resolves: RHEL-21850       (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message     [rhel-8])
    - Resolves: RHEL-21852       (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise     message [rhel-8])
    - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
    - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
    - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
    - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
    - Resolves: RHEL-21154       (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
    - Resolves: RHEL-21156       (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
    - Resolves: RHEL-21840       (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise     message [rhel-8])
    - Resolves: RHEL-21842       (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])
    - Resolves: RHEL-7560       (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06, has edk2 packages installed that are affected by multiple vulnerabilities:

  - Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
    (CVE-2021-38578)

  - EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability. (CVE-2022-36763)

  - EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability. (CVE-2022-36764)

  - EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer     overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result     in a compromise of confidentiality, integrity, and/or availability. (CVE-2022-36765)

  - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be     very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL     subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to     very long delays when processing those messages, which may lead to a Denial of Service. An OBJECT     IDENTIFIER is composed of a series of numbers - sub-identifiers - most of which have no size limit.
    OBJ_obj2txt() may be used to translate an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the     OpenSSL type ASN1_OBJECT) to its canonical numeric text form, which are the sub-identifiers of the OBJECT     IDENTIFIER in decimal form, separated by periods. When one of the sub-identifiers in the OBJECT IDENTIFIER     is very large (these are sizes that are seen as absurdly large, taking up tens or hundreds of KiBs), the     translation to a decimal number in text may take a very long time. The time complexity is O(n^2) with 'n'     being the size of the sub-identifiers in bytes (*). With OpenSSL 3.0, support to fetch cryptographic     algorithms using names / identifiers in string form was introduced. This includes using OBJECT IDENTIFIERs     in canonical numeric text form as identifiers for fetching algorithms. Such OBJECT IDENTIFIERs may be     received through the ASN.1 structure AlgorithmIdentifier, which is commonly used in multiple protocols to     specify what cryptographic algorithm should be used to sign or verify, encrypt or decrypt, or digest     passed data. Applications that call OBJ_obj2txt() directly with untrusted data are affected, with any     version of OpenSSL. If the use is for the mere purpose of display, the severity is considered low. In     OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS. It also impacts     anything that processes X.509 certificates, including simple things like verifying its signature. The     impact on TLS is relatively low, because all versions of OpenSSL have a 100KiB limit on the peer's     certificate chain. Additionally, this only impacts clients, or servers that have explicitly enabled client     authentication. In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects, such as X.509     certificates. This is assumed to not happen in such a way that it would cause a Denial of Service, so     these versions are considered not affected by this issue in such a way that it would be cause for concern,     and the severity is therefore considered low. (CVE-2023-2650)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
198086	EulerOS Virtualization 2.11.1 : edk2 (EulerOS-SA-2024-1722)	Nessus	Huawei Local Security Checks	2024/5/29	2024/5/29	high
240041	TencentOS Server 3: edk2 (TSSA-2024:0190)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
216966	SUSE SLES15 Security Update : ovmf (SUSE-SU-2025:0752-1)	Nessus	SuSE Local Security Checks	2025/3/1	2025/3/1	high
197746	RHEL 8 : edk2 (RHSA-2024:3017)	Nessus	Red Hat Local Security Checks	2024/5/23	2024/11/7	high
198013	Oracle Linux 8 : edk2 (ELSA-2024-3017)	Nessus	Oracle Linux Local Security Checks	2024/5/28	2025/9/9	high
330508	NewStart CGSL MAIN 6.06 : edk2 Multiple Vulnerabilities (NS-SA-2026-0057)	Nessus	NewStart CGSL Local Security Checks	2026/7/29	2026/7/29	critical

检测

插件搜索

high

high

high

high

high

critical