CVE-2023-45229mediumCWE-125

CVE-2023-45229: falha de média gravidade em TianoCore edk2

Out-of-Bounds Read in EDK II Network Package

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar edk2+ Monitorar edk2

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 1.0%
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
TianoCore · edk2
CVEs relacionadas — TianoCore edk2

No mesmo produto, das mais perigosas para as menos.

CVE-2023-45233HIGHInfinite loop in EDK II Network PackageEPSS 2.1%CVE-2023-45232HIGHInfinite loop in EDK II Network PackageEPSS 2.1%CVE-2023-45235HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2023-45230HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2023-45234HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2023-45237MEDIUMUse of a Weak PseudoRandom Number Generator in EDK II Network PackageEPSS 1.0%