San PixieFAIL

Scheda tecnica

Divulgata il

16 gennaio 2024

CVE

CVE-2023-45229CVE-2023-45237

CVSS

6.5

Prodotto

TianoCore · edk2

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

Fonti: blog.quarkslab.com