The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0407-1 advisory.

    - CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise     messages.
      (bsc#1218879)
    - CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. (bsc#1218880)
    - CVE-2023-45231: out-of-bounds read in edk2 when handling a ND Redirect message with truncated options.
    (bsc#1218881)
    - CVE-2023-45232: infinite loop in edk2 when parsing unknown options in the Destination Options header.
    (bsc#1218882)
    - CVE-2023-45233: infinite loop in edk2 when parsing PadN options in the Destination Options header.
    (bsc#1218883)
    - CVE-2023-45234: buffer overflow in edk2 when processing DNS Servers options in a DHCPv6 Advertise     message.
      (bsc#1218884)
    - CVE-2023-45235: buffer overflow in edk2 when handling the Server ID option in a DHCPv6 proxy Advertise     message.
      (bsc#1218885)
    - CVE-2023-45236: predictable TCP Initial Sequence Numbers in edk2 network packages. (bsc#1218886)
    - CVE-2023-45237: use of a weak pseudorandom number generator in edk2. (bsc#1218887)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4207 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4207-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     June 05, 2025                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : edk2     Version        : 2020.11-2+deb11u3     CVE ID         : CVE-2021-28216 CVE-2021-38575 CVE-2021-38576 CVE-2021-38578                      CVE-2022-36763 CVE-2022-36764 CVE-2022-36765 CVE-2023-45229                      CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233                      CVE-2023-45234 CVE-2023-45235 CVE-2024-1298 CVE-2024-38796     Debian Bug     : 1014468 1060408 1084055 1061256

    Multiple security vulnerabilities have been fixed in EDK II, a modern,     feature-rich, cross-platform firmware development environment. Remotely     exploitable buffer overflows and out-of-bounds or infinite loop     vulnerabilities may lead to a denial of service or the execution of     arbitrary code.

    For Debian 11 bullseye, these problems have been fixed in version     2020.11-2+deb11u3.

    We recommend that you upgrade your edk2 packages.

    For the detailed security status of edk2 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/edk2

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has edk2 packages installed that are affected by multiple vulnerabilities:

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option     from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45235)

  - EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability. (CVE-2022-36763)

  - EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability. (CVE-2022-36764)

  - EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer     overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result     in a compromise of confidentiality, integrity, and/or availability. (CVE-2022-36765)

  - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or     IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality. (CVE-2023-45229)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8102:05 advisory.

    * edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message     (CVE-2023-45235)
      * EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)
      * EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)
      * edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message     (CVE-2023-45229)
      * edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)
      * edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)
      * edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)
      * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0196-1 advisory.

    - CVE-2023-45231: Fixed out of bounds read when handling a ND Redirect message with truncated options     (bsc#1218881).
    - CVE-2023-45232: Fixed infinite loop when parsing unknown options in the Destination Options header     (bsc#1218882).
    - CVE-2023-45233: Fixed infinite loop when parsing a PadN option in the Destination Options header     (bsc#1218883).
    - CVE-2023-45234: Fixed buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message     (bsc#1218884).
    - CVE-2023-45235: Fixed buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise     message (bsc#1218885).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
216198	SUSE SLES15 Security Update : ovmf (SUSE-SU-2025:0407-1)	Nessus	SuSE Local Security Checks	2025/2/12	2025/2/12	high
237864	Debian dla-4207 : ovmf - security update	Nessus	Debian Local Security Checks	2025/6/5	2025/6/5	critical
242805	NewStart CGSL MAIN 7.02 : edk2 Multiple Vulnerabilities (NS-SA-2025-0105)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	high
293060	MiracleLinux 9 : edk2-20231122-6.el9 (AXSA:2024-8102:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
294917	SUSE SLES12 Security Update : ovmf (SUSE-SU-2026:0196-1)	Nessus	SuSE Local Security Checks	2026/1/22	2026/1/22	high

检测

插件搜索

high

critical

high

high

high