Saint PixieFAIL

Technical record

Disclosed on

January 16 2024

CVE

CVE-2023-45229CVE-2023-45237

CVSS

6.5

Product

TianoCore · edk2

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

Sources: blog.quarkslab.com