Lucene search

K

PRIOn knowledge basePRION:CVE-2023-45231

HistoryJan 16, 2024 - 4:15 p.m.

Out-of-bounds

2024-01-1616:15:00

PRIOn knowledge base

www.prio-n.com

9

edk2 network package

out-of-bounds

vulnerability

neighbor discovery

unauthorized access

loss of confidentiality

nvd

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.3%

EDK2’s Network Package is susceptible to an out-of-bounds read
vulnerability when processing Neighbor Discovery Redirect message. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality.

CPENameOperatorVersion
edk2le202311

References

packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html

www.openwall.com/lists/oss-security/2024/01/16/2

github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h

lists.fedoraproject.org/archives/list/[email protected]/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/

security.netapp.com/advisory/ntap-20240307-0011/

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.3%

Related for PRION:CVE-2023-45231

debiancve1 cvelist1 nvd1 alpinelinux1 cve1 redhatcve1 ubuntucve1 cbl_mariner2 almalinux2 nessus17 redhat2 amazon1 osv13 oraclelinux7 rocky1 openvas4 thn1 ubuntu1 fedora1 cert1 debian1