Red Hat Security Advisory

RHSA-2024:1063

edk2 security update

Released 2024-03-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) edk2-20220126gitbb1bba3d77-6.el8_9.6, edk2-aarch64-20220126gitbb1bba3d77-6.el8_9.6, edk2-ovmf-20220126gitbb1bba3d77-6.el8_9.6

TI-2023-24235 CVE-2023-45230 · GHSA-fc9w-pqjw-8r96

HIGH 71

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01213 Published 2024-01-16 Fixed CWE-119

TI-2023-24239 CVE-2023-45234 · GHSA-mrjv-p9q7-rxgr

MEDIUM 40

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01186 Published 2024-01-16 Fixed CWE-119