AZL-39319
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-39319.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-39319
- Upstream
- Published
- 2024-01-16T16:15:12Z
- Modified
- 2026-04-01T05:23:48.370505Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2023-45235 affecting package hvloader for versions less than 1.0.1-9
- Details
-
EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
- References