Rocky Linux 8.6 主機上安裝的多個套件受到 CIQ ciqsa-2026_0037 公告中提及的多個弱點影響。

    此公告彙總了 CIQ LTS 8.6中 edk2 SRPM 的安全修正。它解決了 26 個 CVE：
    CVE-2018-3613、CVE-2022-36764、 CVE-2023-4523CVE-2023-45235CVE-2022-4304和 21 個。

Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Rocky Linux 8.6 主机上安装的多个程序包受到 CIQ ciqsa-2026_0037 公告中提及的多个漏洞影响。

    此公告汇总了 CIQ LTS 8.6中 edk2 SRPM 的安全修复。它解决了 26 个 CVE：
    CVE-2018-3613、 CVE-2022-36764、 CVE-2023-4523、 CVE-2023-45235和 CVE-2022-430421 个。

Tenable 已直接从 CIQ 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Rocky Linux 9.2 ホストに、CIQ ciqsa-2026_0408 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    このアドバイザリは、CIQ LTS 9.2のedk2 SRPMのセキュリティ修正をまとめたものです。25 件の CVE に対処します:
    CVE-2022-36763、 CVE-2022-36764、 CVE-2022-36765、 CVE-2022-4304、 CVE-2022-4450、その他 20 個。

Tenable は、前述の記述ブロックを CIQ セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Rocky Linux 9.2 主机上安装的多个程序包受到 CIQ ciqsa-2026_0408 公告中提及的多个漏洞影响。

    此公告汇总了 CIQ LTS 9.2中 edk2 SRPM 的安全修复。它解决了 25 个 CVE：
    CVE-2022-36763、、CVE-2022-36764、CVE-2022-36765CVE-2022-4304CVE-2022-4450和 20 个。

Tenable 已直接从 CIQ 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Rocky Linux 9.2 主機上安裝的多個套件受到 CIQ ciqsa-2026_0408 公告中提及的多個弱點影響。

    此公告彙總了 CIQ LTS 9.2中 edk2 SRPM 的安全修正。它解決了 25 個 CVE：
    CVE-2022-36763、CVE-2022-36764、 CVE-2022-36765CVE-2022-4304CVE-2022-4450和另外 20 個。

Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Rocky Linux 8.6 ホストに、CIQ ciqsa-2026_0037 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    このアドバイザリは、CIQ LTS 8.6のedk2 SRPMのセキュリティ修正をまとめたものです。26 件の CVE に対処します:
    CVE-2018-3613、 CVE-2022-36764、 CVE-2023-4523、 CVE-2023-45235、 CVE-2022-4304、その他 21 個。

Tenable は、前述の記述ブロックを CIQ セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote NewStart CGSL host, running version MAIN 6.06, has edk2 packages installed that are affected by multiple vulnerabilities:

  - Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
    (CVE-2021-38578)

  - EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability. (CVE-2022-36763)

  - EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a     heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a     compromise of confidentiality, integrity, and/or availability. (CVE-2022-36764)

  - EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer     overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result     in a compromise of confidentiality, integrity, and/or availability. (CVE-2022-36765)

  - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be     very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL     subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to     very long delays when processing those messages, which may lead to a Denial of Service. An OBJECT     IDENTIFIER is composed of a series of numbers - sub-identifiers - most of which have no size limit.
    OBJ_obj2txt() may be used to translate an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the     OpenSSL type ASN1_OBJECT) to its canonical numeric text form, which are the sub-identifiers of the OBJECT     IDENTIFIER in decimal form, separated by periods. When one of the sub-identifiers in the OBJECT IDENTIFIER     is very large (these are sizes that are seen as absurdly large, taking up tens or hundreds of KiBs), the     translation to a decimal number in text may take a very long time. The time complexity is O(n^2) with 'n'     being the size of the sub-identifiers in bytes (*). With OpenSSL 3.0, support to fetch cryptographic     algorithms using names / identifiers in string form was introduced. This includes using OBJECT IDENTIFIERs     in canonical numeric text form as identifiers for fetching algorithms. Such OBJECT IDENTIFIERs may be     received through the ASN.1 structure AlgorithmIdentifier, which is commonly used in multiple protocols to     specify what cryptographic algorithm should be used to sign or verify, encrypt or decrypt, or digest     passed data. Applications that call OBJ_obj2txt() directly with untrusted data are affected, with any     version of OpenSSL. If the use is for the mere purpose of display, the severity is considered low. In     OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS. It also impacts     anything that processes X.509 certificates, including simple things like verifying its signature. The     impact on TLS is relatively low, because all versions of OpenSSL have a 100KiB limit on the peer's     certificate chain. Additionally, this only impacts clients, or servers that have explicitly enabled client     authentication. In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects, such as X.509     certificates. This is assumed to not happen in such a way that it would cause a Denial of Service, so     these versions are considered not affected by this issue in such a way that it would be cause for concern,     and the severity is therefore considered low. (CVE-2023-2650)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0408 advisory.

    This advisory aggregates security fixes for the edk2 SRPM in CIQ LTS 9.2. It addresses 25 CVEs:
    CVE-2018-3613, CVE-2022-36764, CVE-2023-4523, CVE-2023-45235, CVE-2022-4304, and 20 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0037 advisory.

    This advisory aggregates security fixes for the edk2 SRPM in CIQ LTS 8.6. It addresses 26 CVEs:
    CVE-2018-3613, CVE-2022-36764, CVE-2023-4523, CVE-2023-45235, CVE-2022-4304, and 21 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
358197	Rocky Linux 8.6 [CIQ] 安全性更新：edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc 多個弱點（ciqsa-2026_0037）	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	high
358197	Rocky Linux 8.6 [CIQ] 安全更新：edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / 等多个漏洞（ciqsa-2026_0037）	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	high
355203	Rocky Linux 9.2 [CIQ] セキュリティ更新プログラム:edk2-aarch64/edk2-ovmf/edk2-tools/edk2-tools-debuginfo/etcの複数の脆弱性(ciqsa-2026_0408)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/11/12	critical
355203	Rocky Linux 9.2 [CIQ] 安全更新：edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / 等多个漏洞（ciqsa-2026_0408）	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/11/12	critical
355203	Rocky Linux 9.2 [CIQ] 安全性更新：edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc 多個弱點（ciqsa-2026_0408）	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/11/12	critical
358197	Rocky Linux 8.6 [CIQ] セキュリティ更新プログラム:edk2-aarch64/edk2-ovmf/edk2-tools/edk2-tools-debuginfo/etcの複数の脆弱性(ciqsa-2026_0037)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	high
330508	NewStart CGSL MAIN 6.06 : edk2 Multiple Vulnerabilities (NS-SA-2026-0057)	Nessus	NewStart CGSL Local Security Checks	2026/7/29	2026/7/29	critical
355203	Rocky Linux 9.2 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0408)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/11/12	critical
358197	Rocky Linux 8.6 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0037)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	high

检测

插件搜索

high

high

critical

critical

critical

high

critical

critical

high