Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2023-24239 CVE-2023-45234 · GHSA-mrjv-p9q7-rxgr

Buffer Overflow in EDK II Network Package

Priority MEDIUM 40

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01186 Published 2024-01-16 Fixed CWE-119
TI-2023-24238 CVE-2023-45233 · GHSA-p9h6-p7cr-7842

Infinite loop in EDK II Network Package

Priority HIGH 74

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02084 Published 2024-01-16 Fixed CWE-835
TI-2023-24237 CVE-2023-45232 · GHSA-3r3p-444m-2g4p

Infinite loop in EDK II Network Package

Priority MEDIUM 43

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02084 Published 2024-01-16 Fixed CWE-835
TI-2023-24236 CVE-2023-45231 · GHSA-pr27-mhpp-2ccr

Out-of-Bounds Read in EDK II Network Package

Priority MEDIUM 62

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighbor Discovery Redirect message.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00849 Published 2024-01-16 Fixed CWE-125
Priority LOW 31

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00972 Published 2024-01-16 Fixed CWE-125