Red Hat Security Advisory

RHSA-2024:1076

edk2 security update

Released 2024-03-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.2) edk2-aarch64-20221207gitfff6d81270b5-9.el9_2.2, edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.2, edk2-tools-20221207gitfff6d81270b5-9.el9_2.2 +1
Red Hat Enterprise Linux AppStream EUS (v.9.2) edk2-20221207gitfff6d81270b5-9.el9_2.2, edk2-aarch64-20221207gitfff6d81270b5-9.el9_2.2, edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.2

TI-2023-24235 CVE-2023-45230 · GHSA-fc9w-pqjw-8r96

HIGH 71

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01213 Published 2024-01-16 Fixed CWE-119

TI-2023-24239 CVE-2023-45234 · GHSA-mrjv-p9q7-rxgr

MEDIUM 40

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01186 Published 2024-01-16 Fixed CWE-119