CVE-2022-4087

A vulnerability was found in iPXE. It has been declared as problematic. This vulnerability affects the function tls_new_ciphertext of the file src/net/tls.c of the component TLS. The manipulation of the argument pad_len leads to information exposure through discrepancy. The name of the patch is 186306d6199096b7a7c4b4574d4be8cdb8426729. It is recommended to apply a patch to fix this issue. VDB-214054 is the identifier assigned to this vulnerability.

Published Feb 16, 2026

https://github.com/ipxe/ipxe/commit/186306d6199096b7a7c4b4574d4be8cdb8426729

CVSS ScoreMedium

4.3

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2022-4087

A vulnerability was found in iPXE. It has been declared as problematic. This vulnerability affects the function tls_new_ciphertext of the file src/net/tls.c of the component TLS. The manipulation of the argument pad_len leads to information exposure through discrepancy. The name of the patch is 186306d6199096b7a7c4b4574d4be8cdb8426729. It is recommended to apply a patch to fix this issue. VDB-214054 is the identifier assigned to this vulnerability.

Published Feb 16, 2026

https://github.com/ipxe/ipxe/commit/186306d6199096b7a7c4b4574d4be8cdb8426729

CVSS ScoreMedium

4.3


rpm	ipxe	20130517-5.gitc4bce43.el7
rpm	ipxe	20130517-6.gitc4bce43.el7
rpm	ipxe	20130517-7.gitc4bce43.el7
rpm	ipxe	20130517-8.gitc4bce43.el7_2.1
rpm	ipxe	20160127-5.git6366fa7a.el7
rpm	ipxe	20170123-1.git4e85b27.el7
rpm	ipxe	20170123-1.git4e85b27.el7_4.1
rpm	ipxe	20171112-1.el7
rpm	ipxe	20180825-2.git133f4c.el7
rpm	ipxe	20180825-3.git133f4c.el7
rpm	ipxe	20181214-1.git133f4c47.el8
rpm	ipxe	20181214-11.git133f4c47.el8
rpm	ipxe	20181214-3.git133f4c47.el8
rpm	ipxe	20181214-5.git133f4c47.el8
rpm	ipxe	20181214-6.git133f4c47.el8
rpm	ipxe	20181214-8.git133f4c47.el8
rpm	ipxe	20181214-9.git133f4c47.el8
rpm	ipxe	20200823-9.git4bd064de.el9
rpm	ipxe	20200823-9.git4bd064de.el9_0

Ecosystem	Package	Version


rpm	ipxe	20130517-5.gitc4bce43.el7
rpm	ipxe	20130517-6.gitc4bce43.el7
rpm	ipxe	20130517-7.gitc4bce43.el7
rpm	ipxe	20130517-8.gitc4bce43.el7_2.1
rpm	ipxe	20160127-5.git6366fa7a.el7
rpm	ipxe	20170123-1.git4e85b27.el7
rpm	ipxe	20170123-1.git4e85b27.el7_4.1
rpm	ipxe	20171112-1.el7
rpm	ipxe	20180825-2.git133f4c.el7
rpm	ipxe	20180825-3.git133f4c.el7
rpm	ipxe	20181214-1.git133f4c47.el8
rpm	ipxe	20181214-11.git133f4c47.el8
rpm	ipxe	20181214-3.git133f4c47.el8
rpm	ipxe	20181214-5.git133f4c47.el8
rpm	ipxe	20181214-6.git133f4c47.el8
rpm	ipxe	20181214-8.git133f4c47.el8
rpm	ipxe	20181214-9.git133f4c47.el8
rpm	ipxe	20200823-9.git4bd064de.el9
rpm	ipxe	20200823-9.git4bd064de.el9_0

Find vulnerabilities. Fix fast with AI.

CVE-2022-4087

CVE-2022-4087