Red Hat Security Advisory

RHSA-2024:8104

edk2 security update

Released 2024-10-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.8) edk2-20220126gitbb1bba3d77-4.el8_8.6, edk2-aarch64-20220126gitbb1bba3d77-4.el8_8.6, edk2-ovmf-20220126gitbb1bba3d77-4.el8_8.6

TI-2023-24238 CVE-2023-45233 · GHSA-p9h6-p7cr-7842

HIGH 74

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02084 Published 2024-01-16 Fixed CWE-835

TI-2023-24237 CVE-2023-45232 · GHSA-3r3p-444m-2g4p

MEDIUM 43

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02084 Published 2024-01-16 Fixed CWE-835