Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/23 12:00 a.m.•1 views

CVE-2026-56114: Out-of-bounds Write

dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6makemessage in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTIONPDEXCLUDE option body...

6.5CVSS6.1AI score0.00269EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/03/13 7:42 a.m.•38 views

Important: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as havi...

8.8CVSS7.1AI score0.01196EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/01/16 4:14 p.m.•4 views

CVE-2023-45234 Buffer Overflow in EDK II Network Package

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or...

8.3CVSS7.9AI score0.01196EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•1 views

CVE-2023-45234: Improper Restriction of Operations within the Bounds of a Memory Buffer

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or...

8.8CVSS8.1AI score0.01196EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/16 12:00 a.m.•5 views

PT-2024-1257 · Edk2 +11 · Edk2 +11

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the DHCPv6 Advertise Message Handler component of the EDK2 library. This vulnerability can be exploited by an attacker to gain...

9.8CVSS7.2AI score0.02101EPSS
SaveExploits3References164
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•1 views

CVE-2023-45229: Out-of-bounds Read

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

6.5CVSS7.1AI score0.00944EPSS
SaveExploits1References3
Rows per page
Query Builder