AZL-39064
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-39064.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-39064
- Upstream
- Published
- 2024-01-16T16:15:12Z
- Modified
- 2026-04-01T05:13:22.934509Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2023-45235 affecting package edk2 for versions less than 20240223gitedc6681206c1-1
- Details
-
EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
- References