Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality. References: https://nvd.nist.gov/vuln/detail/CVE-2023-45229 Upstream-patches: tianocore/edk2@1dbb10c tianocore/edk2@0736276 tianocore/edk2@1c440a5 tianocore/edk2@1d0b95f Signed-off-by: Soumya Sambu <[email protected]>
- Loading branch information