Red Hat Security Advisory

RHSA-2024:1004

edk2 security update

Released 2024-02-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) edk2-20190829git37eef91017ad-9.el8_2.3, edk2-ovmf-20190829git37eef91017ad-9.el8_2.3
Red Hat Enterprise Linux AppStream E4S (v. 8.2) edk2-20190829git37eef91017ad-9.el8_2.3, edk2-ovmf-20190829git37eef91017ad-9.el8_2.3
Red Hat Enterprise Linux AppStream TUS (v. 8.2) edk2-20190829git37eef91017ad-9.el8_2.3, edk2-ovmf-20190829git37eef91017ad-9.el8_2.3

TI-2023-24235 CVE-2023-45230 · GHSA-fc9w-pqjw-8r96

HIGH 71

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01213 Published 2024-01-16 Fixed CWE-119