Red Hat Security Advisory

RHSA-2024:1722

edk2 security update

Released 2024-04-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) edk2-20190829git37eef91017ad-9.el8_2.4, edk2-ovmf-20190829git37eef91017ad-9.el8_2.4
Red Hat Enterprise Linux AppStream E4S (v. 8.2) edk2-20190829git37eef91017ad-9.el8_2.4, edk2-ovmf-20190829git37eef91017ad-9.el8_2.4
Red Hat Enterprise Linux AppStream TUS (v. 8.2) edk2-20190829git37eef91017ad-9.el8_2.4, edk2-ovmf-20190829git37eef91017ad-9.el8_2.4

TI-2023-24239 CVE-2023-45234 · GHSA-mrjv-p9q7-rxgr

MEDIUM 40

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01186 Published 2024-01-16 Fixed CWE-119