CVE-2023-45230
Buffer Overflow in EDK II Network Package
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Buffer Overflow in EDK II Network Package
EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
Reserved 2023-10-05 | Published 2024-01-16 | Updated 2024-10-22 | Assigner TianoCoreCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Quarkslab Vulnerability Reports Team
Doug Flick
github.com/...e/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
www.openwall.com/lists/oss-security/2024/01/16/2
packetstormsecurity.com/.../PixieFail-Proof-Of-Concepts.html
security.netapp.com/advisory/ntap-20240307-0011/
lists.fedoraproject.org/...SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/
Support options
