Linux · 
Ubuntu · Package update · August 12, 2025
Ubuntu · Package update · August 12, 2025ovmf 2024.02-2ubuntu0.6: ovmf 2024.02-2ubuntu0.6 for Ubuntu 24.04.5 LTS (noble)
ovmf 2024.02-2ubuntu0.6, released August 12, 2025, fixes 17 CVEs in ovmf. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
17
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.6658
99th percentile
Priority of the 17 CVEs
Patch now 0
Urgent 0
High 6
Routine 11
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ovmf | Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2024-6119 | openssl: openssl: Possible denial of service in X.509 name checks | 7.5 | 0.6658 | None reported |
| High | CVE-2024-9143 | libssl3t64: Issue summary: Use of the low-level GF(2^m) elliptic curve APIs withuntrustedexplicit values for the field polynomial... | 8.8 | 0.1248 | None reported |
| High | CVE-2024-5535 | OpenSSL: CVE-2024-5535 SSL_select_next_proto buffer overread | 9.1 | 0.0613 | Exploitation Less Likely |
| High | CVE-2024-4741 | openssl-1_1: Fixed a use-after-free with SSL_free_buffers | 9.8 | 0.0328 | None reported |
| High | CVE-2024-1298 | ovmf: Fixed potential UINT32 overflow in S3 ResumeCount (bsc#1225889). | 7.5 | 0.0022 | None reported |
| High | CVE-2025-3770 | SMM IDT Privilege Escalation Vulnerability | 7.0 | 0.0018 | None reported |
| Routine | CVE-2024-2511 | libssl1.1: Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 s... | 5.9 | 0.5930 | None reported |
| Routine | CVE-2023-3446 | openssl: Fix Excessive time spent checking DH keys and parameters | 5.9 | 0.0653 | None reported |
| Routine | CVE-2023-5678 | libssl3t64: Issue summary: Generating excessively long X9.42 DH keys or checkingexcessively long X9.42 DH keys or parameters may... | 5.9 | 0.0509 | None reported |
| Routine | CVE-2024-0727 | libssl3t64: Issue summary: Processing a maliciously formatted PKCS12 file may leadOpenSSLto crash leading to a potential Denial o... | 5.5 | 0.0319 | None reported |
| Routine | CVE-2023-3817 | openssl: Fix Excessive time spent checking DH q parameter value | 5.9 | 0.0305 | None reported |
| Routine | CVE-2023-6237 | libssl3t64: Issue summary: Checking excessively long invalid RSA public keys may takea long time.Impact summary: Applications tha... | 5.9 | 0.0263 | None reported |
| Routine | CVE-2024-13176 | nodejs24: Fix timing side-channel in ECDSA signature computation (bsc#1236136) | 6.5 | 0.0075 | None reported |
| Routine | CVE-2024-38796 | edk2-aarch64: edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z]) | 5.9 | 0.0037 | None reported |
| Routine | CVE-2025-2295 | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 3.5 | 0.0025 | None reported |
| Routine | CVE-2024-38805 | efi-shell-aa64: EDK2 contains a vulnerability in BIOS where a user may cause an IntegerOverflow or Wraparound by network means | 6.3 | 0.0023 | None reported |
| Routine | CVE-2024-38797 | efi-shell-aa64: EDK2 contains a vulnerability in the HashPeImageByType() | 4.6 | 0.0022 | None reported |
Showing 1 to 17 of 17
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.