[Bug 1218679] VUL-0: CVE-2022-36764: EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of con ...

8 May 2024


      https://bugzilla.suse.com/show_bug.cgi?id=1218679
https://bugzilla.suse.com/show_bug.cgi?id=1218679#c5

--- Comment #5 from Joey Lee <jlee@suse.com> ---
commit 8f6d343ae639fba8e4b80e45257275e23083431f                
[edk2-stable202402]
Author: Douglas Flick [MSFT] <doug.edk2@gmail.com>
Date:   Fri Jan 12 02:16:06 2024 +0800

    SecurityPkg: : Adding CVE 2022-36764 to SecurityFixes.yaml

commit 0d341c01eeabe0ab5e76693b36e728b8f538a40e                
[edk2-stable202402]
Author: Douglas Flick [MSFT] <doug.edk2@gmail.com>
Date:   Fri Jan 12 02:16:05 2024 +0800

    SecurityPkg: DxeTpmMeasureBootLib: SECURITY PATCH 4118 - CVE 2022-36764

commit c7b27944218130cca3bbb20314ba5b88b5de4aa4                
[edk2-stable202402]
Author: Douglas Flick [MSFT] <doug.edk2@gmail.com>
Date:   Fri Jan 12 02:16:04 2024 +0800

    SecurityPkg: DxeTpm2MeasureBootLib: SECURITY PATCH 4118 - CVE 2022-36764
-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1218679] VUL-0: CVE-2022-36764: EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of con ...

bugzilla_noreply＠suse.com