Lucene search
+L

2101 matches found

OSV
OSV
added 2024/01/16 4:15 p.m.13 views

AZL-38227 CVE-2023-45232 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.9AI score0.02101EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2024/01/16 4:15 p.m.38 views

CVE-2023-45233

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS8.3AI score0.02101EPSS
SaveExploits1References7
OSV
OSV
added 2024/01/16 4:15 p.m.33 views

CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS7AI score0.02101EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
added 2024/01/16 4:15 p.m.34 views

CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS8.3AI score0.02101EPSS
SaveExploits1References7
OSV
OSV
added 2024/01/16 4:15 p.m.11 views

AZL-39346 CVE-2023-45232 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.7AI score0.02101EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/16 4:15 p.m.7 views

DEBIAN-CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.8AI score0.02101EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/16 4:15 p.m.31 views

Design/Logic Flaw

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

5CVSS7.1AI score0.02101EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/01/16 4:15 p.m.7 views

UBUNTU-CVE-2023-45233

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.9AI score0.02101EPSS
SaveExploits1References6
OSV
OSV
added 2024/01/16 4:15 p.m.7 views

UBUNTU-CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.8AI score0.02101EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2024/01/16 4:15 p.m.39 views

CVE-2023-45233

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS7AI score0.02101EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2024/01/16 4:15 p.m.55 views

CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS7AI score0.02101EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/01/16 4:13 p.m.33 views

CVE-2023-45233 Infinite loop in EDK II Network Package

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS8.2AI score0.02101EPSS
SaveExploits1References5
CVE
CVE
added 2024/01/16 4:13 p.m.549 views

CVE-2023-45233

EDK2 Network Package contains an infinite loop vulnerability when parsing the PadN option in the Destination Options header of IPv6 (CVE-2023-45233). The issue is documented in multiple advisories across distributions (e.g., Debian DSA-5624-1 and various ALMA/CBLMariner entries) as fixed in newer...

7.5CVSS8.1AI score0.02101EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
added 2024/01/16 4:13 p.m.40 views

CVE-2023-45233

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.9AI score0.02101EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2024/01/16 4:12 p.m.35 views

CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.9AI score0.02101EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2024/01/16 4:12 p.m.20 views

CVE-2023-45232 Infinite loop in EDK II Network Package

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS7.6AI score0.02101EPSS
SaveExploits1References5
CVE
CVE
added 2024/01/16 4:12 p.m.508 views

CVE-2023-45232

Summary: CVE-2023-45232 affects EDK2’s Network Package, causing an infinite loop while parsing unknown options in the Destination Options header of IPv6. This can lead to unauthorized access and a loss of availability. What is affected: EDK2 Network Package in various Linux distributions (e.g., D...

7.5CVSS8.2AI score0.02101EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
added 2024/01/15 12:00 a.m.44 views

Mageia: Security Advisory (MGASA-2024-0010)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.93305EPSS
SaveExploits22References11
OSV
OSV
added 2024/01/12 3:15 p.m.9 views

CVE-2023-49254

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

8.8CVSS6AI score0.00733EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/12 3:15 p.m.24 views

Design/Logic Flaw

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

6.5CVSS7.8AI score0.27912EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder