Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-45235

Опубликовано: 16 янв. 2024
Источник: nvd
CVSS3: 8.3
CVSS3: 8.8
EPSS Низкий

Описание

EDK2's Network Package is susceptible to a buffer overflow vulnerability when

handling Server ID option

from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*
Версия до 202311 (включая)

EPSS

Процентиль: 54%
0.00314
Низкий

8.3 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-119
CWE-119

Связанные уязвимости

CVSS3: 8.3
ubuntu
больше 1 года назад

EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

CVSS3: 8.8
redhat
больше 1 года назад

EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

CVSS3: 8.8
msrc
около 1 года назад

Описание отсутствует

CVSS3: 8.3
debian
больше 1 года назад

EDK2's Network Package is susceptible to a buffer overflow vulnerabili ...

CVSS3: 8.3
github
больше 1 года назад

EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

EPSS

Процентиль: 54%
0.00314
Низкий

8.3 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-119
CWE-119