Linux · 
Ubuntu · Package update · August 12, 2025
Ubuntu · Package update · August 12, 2025ovmf 2022.02-3ubuntu0.22.04.4: ovmf 2022.02-3ubuntu0.22.04.4 for Ubuntu 22.04.1 LTS (jammy)
ovmf 2022.02-3ubuntu0.22.04.4, released August 12, 2025, fixes 25 CVEs in ovmf. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
25
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.7536
99th percentile
Priority of the 25 CVEs
Patch now 0
Urgent 0
High 12
Routine 13
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ovmf | Ubuntu 22.04.1 LTS (jammy) | 2022.02-3ubuntu0.22.04.4 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2022-0778 | libssl3t64: The BN_mod_sqrt() function, which computes a modular square root, containsa bug that can cause it to loop forever for... | 7.5 | 0.7319 | None reported |
| High | CVE-2023-0286 | libssl3t64: There is a type confusion vulnerability relating to X.400 addressprocessinginside an X.509 GeneralName | 7.5 | 0.6841 | None reported |
| High | CVE-2021-3712 | libssl3t64: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRINGstructure which contains a buffer holding th... | 7.4 | 0.4814 | None reported |
| High | CVE-2022-4450 | libssl3t64: The function PEM_read_bio_ex() reads a PEM file from a BIO and parses anddecodes the "name" (e.g | 7.5 | 0.2859 | None reported |
| High | CVE-2022-4304 | libssl3t64: A timing based side channel exists in the OpenSSL RSA Decryptionimplementationwhich could be sufficient to recover a... | 7.5 | 0.2351 | None reported |
| High | CVE-2024-9143 | libssl3t64: Issue summary: Use of the low-level GF(2^m) elliptic curve APIs withuntrustedexplicit values for the field polynomial... | 8.8 | 0.1248 | None reported |
| High | CVE-2024-5535 | OpenSSL: CVE-2024-5535 SSL_select_next_proto buffer overread | 9.1 | 0.0613 | Exploitation Less Likely |
| High | CVE-2023-0215 | libssl3t64: The public API function BIO_new_NDEF is a helper function used forstreamingASN.1 data via a BIO | 7.5 | 0.0502 | None reported |
| High | CVE-2023-0464 | libssl3t64: A security vulnerability has been identified in all supported versionsof OpenSSL related to the verification of X.509... | 7.5 | 0.0399 | None reported |
| High | CVE-2024-4741 | openssl-1_1: Fixed a use-after-free with SSL_free_buffers | 9.8 | 0.0328 | None reported |
| High | CVE-2024-1298 | ovmf: Fixed potential UINT32 overflow in S3 ResumeCount (bsc#1225889). | 7.5 | 0.0022 | None reported |
| High | CVE-2025-3770 | SMM IDT Privilege Escalation Vulnerability | 7.0 | 0.0018 | None reported |
| Routine | CVE-2023-2650 | libssl3t64: Issue summary: Processing some specially crafted ASN.1 object identifiersordata containing them may be very slow.Impa... | 6.5 | 0.7536 | None reported |
| Routine | CVE-2024-2511 | libssl1.1: Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 s... | 5.9 | 0.5930 | None reported |
| Routine | CVE-2023-3446 | openssl: Fix Excessive time spent checking DH keys and parameters | 5.9 | 0.0653 | None reported |
| Routine | CVE-2023-5678 | libssl3t64: Issue summary: Generating excessively long X9.42 DH keys or checkingexcessively long X9.42 DH keys or parameters may... | 5.9 | 0.0509 | None reported |
| Routine | CVE-2024-0727 | libssl3t64: Issue summary: Processing a maliciously formatted PKCS12 file may leadOpenSSLto crash leading to a potential Denial o... | 5.5 | 0.0319 | None reported |
| Routine | CVE-2023-3817 | openssl: Fix Excessive time spent checking DH q parameter value | 5.9 | 0.0305 | None reported |
| Routine | CVE-2023-0465 | libssl3t64: Applications that use a non-default option when verifying certificates maybevulnerable to an attack from a malicious... | 5.3 | 0.0177 | None reported |
| Routine | CVE-2023-0466 | libssl3t64: The function X509_VERIFY_PARAM_add0_policy() is documented toimplicitly enable the certificate policy check when doin... | 5.3 | 0.0177 | None reported |
| Routine | CVE-2024-13176 | nodejs24: Fix timing side-channel in ECDSA signature computation (bsc#1236136) | 6.5 | 0.0075 | None reported |
| Routine | CVE-2024-38796 | edk2-aarch64: edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z]) | 5.9 | 0.0037 | None reported |
| Routine | CVE-2025-2295 | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 3.5 | 0.0025 | None reported |
| Routine | CVE-2024-38805 | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 6.3 | 0.0023 | None reported |
| Routine | CVE-2024-38797 | efi-shell-aa64: EDK2 contains a vulnerability in the HashPeImageByType() | 4.6 | 0.0022 | None reported |
Showing 1 to 25 of 25
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.