CVE-2023-45229
published 2024-01-16CVE-2023-45229: EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This…
PriorityP430medium6.5CVSS 3.1
AVAACLPRNUINSUCHINAN
EPSS
0.94%
57.1th percentile
EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | edk2 | < edk2 2022.11-6+deb12u1 (bookworm) | edk2 2022.11-6+deb12u1 (bookworm) |
| msrc | azl3_edk2_20230301gitf80f052277c8-37_on_azure_linux_3.0 | — | — |
| msrc | azl3_edk2_20240223gitedc6681206c1-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_qemu_8.2.0-16_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_edk2_20230301gitf80f052277c8-42_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_hvloader_1.0.1-11_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_hvloader_1.0.1-9_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_qemu_6.2.0-24_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_qemu_6.2.0-25_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_qemu_6.2.0-26_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| paloalto | pan-os | — | — |
| paloalto | prisma_access | — | — |
| tianocore | edk2 | <= 202311 | — |
| tianocore | edk2 | — | — |
| tianocore | edk2 | >= 0 < 2020.11-2+deb11u3 | 2020.11-2+deb11u3 |
| tianocore | edk2 | >= 0 < 2022.11-6+deb12u1 | 2022.11-6+deb12u1 |
| tianocore | edk2 | >= 0 < 2023.11-6 | 2023.11-6 |
| tianocore | edk2 | >= 0 < 2023.11-6 | 2023.11-6 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_msrc6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN-SA-2025-0003 Informational: PAN-OS BIOS and Bootloader Security Bulletin
vendor_paloalto·2025-01-23·CVSS 8.2
[HIGH] PAN-SA-2025-0003 Informational: PAN-OS BIOS and Bootloader Security Bulletin
PAN-SA-2025-0003 Informational: PAN-OS BIOS and Bootloader Security Bulletin
Palo Alto Networks is aware of claims of multiple vulnerabilities in hardware device firmware and bootloaders included in our PA-Series (hardware) firewalls. It is not possible for malicious actors or PAN-OS administrators to exploit these vulnerabilities under normal conditions on PAN-OS versions with up-to-date, secured management interfaces deployed according to the best practices guidelines . Users and administrators do not have access to the BIOS firmware or permissions to modify it. An attacker would need to first compromise the system and then get the root Linux privileges necessary to perform these actions before they could exploit these vulnerabilities. These vulnerabilities themselves do not allow an at
Red Hat
edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
vendor_redhat·2024-01-16·CVSS 6.5
CVE-2023-45229 [MEDIUM] CWE-119 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality.
A vulnerability has been identified in the NetworkPkg IP stack of EDK2, the open-source reference implementation of the UEFI specification. This flaw enables an unauthenticated attacker within the same network vicinity to transmit a specifically crafted DHCPv6 message. Exploiting this vulnerability may result in unauthorized access to memory beyond its boundaries, potentially leading to the exposure of sensitive information.
Microsoft
Out-of-Bounds Read in EDK II Network Package
vendor_msrc·2024-01-09·CVSS 6.5
CVE-2023-45229 [MEDIUM] CWE-125 Out-of-Bounds Read in EDK II Network Package
Out-of-Bounds Read in EDK II Network Package
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
TianoCore: TianoCore
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.mi
Debian
CVE-2023-45229: edk2 - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability wh...
vendor_debian·2023·CVSS 6.5
CVE-2023-45229 [MEDIUM] CVE-2023-45229: edk2 - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability wh...
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
Scope: local
bookworm: resolved (fixed in 2022.11-6+deb12u1)
bullseye: resolved (fixed in 2020.11-2+deb11u3)
forky: resolved (fixed in 2023.11-6)
sid: resolved (fixed in 2023.11-6)
trixie: resolved (fixed in 2023.11-6)
OSV
CVE-2023-45229: EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message
osv·2024-01-16·CVSS 6.5
CVE-2023-45229 [MEDIUM] CVE-2023-45229: EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
No detection rules found.
No public exploits indexed.
http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.htmlhttp://www.openwall.com/lists/oss-security/2024/01/16/2https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7hhttps://security.netapp.com/advisory/ntap-20240307-0011/http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.htmlhttp://www.openwall.com/lists/oss-security/2024/01/16/2https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7hhttps://lists.debian.org/debian-lts-announce/2025/06/msg00007.htmlhttps://security.netapp.com/advisory/ntap-20240307-0011/https://www.kb.cert.org/vuls/id/132380
2024-01-16
Published