CVE-2023-45235
published 2024-01-16CVE-2023-45235: EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This…
PriorityP351high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
1.21%
64.9th percentile
EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | edk2 | < edk2 2022.11-6+deb12u1 (bookworm) | edk2 2022.11-6+deb12u1 (bookworm) |
| msrc | azl3_edk2_20230301gitf80f052277c8-37_on_azure_linux_3.0 | — | — |
| msrc | azl3_edk2_20240223gitedc6681206c1-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_qemu_8.2.0-16_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_edk2_20230301gitf80f052277c8-40_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_edk2_20230301gitf80f052277c8-41_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_hvloader_1.0.1-11_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_hvloader_1.0.1-9_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_qemu_6.2.0-24_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| paloalto | pan-os | — | — |
| paloalto | prisma_access | — | — |
| tianocore | edk2 | <= 202311 | — |
| tianocore | edk2 | — | — |
| tianocore | edk2 | >= 0 < 2020.11-2+deb11u3 | 2020.11-2+deb11u3 |
| tianocore | edk2 | >= 0 < 2022.11-6+deb12u1 | 2022.11-6+deb12u1 |
| tianocore | edk2 | >= 0 < 2023.11-6 | 2023.11-6 |
| tianocore | edk2 | >= 0 < 2023.11-6 | 2023.11-6 |
| tianocore | edk2 | >= 0 < 0~20191122.bd85bf54-2ubuntu3.5 | 0~20191122.bd85bf54-2ubuntu3.5 |
| tianocore | edk2 | >= 0 < 2022.02-3ubuntu0.22.04.2 | 2022.02-3ubuntu0.22.04.2 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_msrc8.8HIGH
vendor_debian8.3HIGH
vendor_redhat8.3HIGH
vendor_ubuntu7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN-SA-2025-0003 Informational: PAN-OS BIOS and Bootloader Security Bulletin
vendor_paloalto·2025-01-23·CVSS 8.2
[HIGH] PAN-SA-2025-0003 Informational: PAN-OS BIOS and Bootloader Security Bulletin
PAN-SA-2025-0003 Informational: PAN-OS BIOS and Bootloader Security Bulletin
Palo Alto Networks is aware of claims of multiple vulnerabilities in hardware device firmware and bootloaders included in our PA-Series (hardware) firewalls. It is not possible for malicious actors or PAN-OS administrators to exploit these vulnerabilities under normal conditions on PAN-OS versions with up-to-date, secured management interfaces deployed according to the best practices guidelines . Users and administrators do not have access to the BIOS firmware or permissions to modify it. An attacker would need to first compromise the system and then get the root Linux privileges necessary to perform these actions before they could exploit these vulnerabilities. These vulnerabilities themselves do not allow an at
Ubuntu
EDK II vulnerabilities
vendor_ubuntu·2024-02-15·CVSS 7.0
CVE-2023-45232 [HIGH] EDK II vulnerabilities
Title: EDK II vulnerabilities
Summary: Several security issues were fixed in EDK II.
Marc Beatove discovered buffer overflows exit in EDK2. An attacker on the
local network could potentially use this to impact availability or possibly
cause remote code execution. (CVE-2022-36763, CVE-2022-36764,
CVE-2022-36765)
It was discovered that a buffer overflows exists in EDK2's Network Package
An attacker on the local network could potentially use these to impact
availability or possibly cause remote code execution. (CVE-2023-45230,
CVE-2023-45234, CVE-2023-45235)
It was discovered that an out-of-bounds read exists in EDK2's Network
Package An attacker on the local network could potentially use this to
impact confidentiality. (CVE-2023-45231)
It was discovered that infinite-loops exists in EDK
Red Hat
edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message
vendor_redhat·2024-01-16·CVSS 8.3
CVE-2023-45235 [HIGH] CWE-119 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message
edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message
EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the disclosure of information and potential compromise of system availability.
Statement: The discovery of a
Microsoft
Buffer Overflow in EDK II Network Package
vendor_msrc·2024-01-09·CVSS 8.8
CVE-2023-45235 [HIGH] CWE-119 Buffer Overflow in EDK II Network Package
Buffer Overflow in EDK II Network Package
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
TianoCore: TianoCore
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.micro
Debian
CVE-2023-45235: edk2 - EDK2's Network Package is susceptible to a buffer overflow vulnerability when ...
vendor_debian·2023·CVSS 8.3
CVE-2023-45235 [HIGH] CVE-2023-45235: edk2 - EDK2's Network Package is susceptible to a buffer overflow vulnerability when ...
EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
Scope: local
bookworm: resolved (fixed in 2022.11-6+deb12u1)
bullseye: resolved (fixed in 2020.11-2+deb11u3)
forky: resolved (fixed in 2023.11-6)
sid: resolved (fixed in 2023.11-6)
trixie: resolved (fixed in 2023.11-6)
OSV
edk2 vulnerabilities
osv·2024-02-15·CVSS 7.8
CVE-2022-36763 [HIGH] edk2 vulnerabilities
edk2 vulnerabilities
Marc Beatove discovered buffer overflows exit in EDK2. An attacker on the
local network could potentially use this to impact availability or possibly
cause remote code execution. (CVE-2022-36763, CVE-2022-36764,
CVE-2022-36765)
It was discovered that a buffer overflows exists in EDK2's Network Package
An attacker on the local network could potentially use these to impact
availability or possibly cause remote code execution. (CVE-2023-45230,
CVE-2023-45234, CVE-2023-45235)
It was discovered that an out-of-bounds read exists in EDK2's Network
Package An attacker on the local network could potentially use this to
impact confidentiality. (CVE-2023-45231)
It was discovered that infinite-loops exists in EDK2's Network Package
An attacker on the local network could potent
OSV
CVE-2023-45235: EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message
osv·2024-01-16·CVSS 8.8
CVE-2023-45235 [HIGH] CVE-2023-45235: EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message
EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
GHSA
GHSA-h9v6-q439-p7j2: EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message
ghsa_unreviewed·2024-01-16
CVE-2023-45235 [HIGH] CWE-119 GHSA-h9v6-q439-p7j2: EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message
EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
No detection rules found.
No public exploits indexed.
http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.htmlhttp://www.openwall.com/lists/oss-security/2024/01/16/2https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7hhttps://lists.fedoraproject.org/archives/list/[email protected]/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/https://security.netapp.com/advisory/ntap-20240307-0011/http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.htmlhttp://www.openwall.com/lists/oss-security/2024/01/16/2https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7hhttps://lists.debian.org/debian-lts-announce/2025/06/msg00007.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/https://security.netapp.com/advisory/ntap-20240307-0011/https://www.kb.cert.org/vuls/id/132380
2024-01-16
Published