Buffer Overflow in EDK II Network Package

CVE-2023-45230

What is CVE-2023-45230?

The EDK2 Network Package by TianoCore contains a vulnerability that arises from a buffer overflow caused by excessively long server ID options received by the DHCPv6 client. An attacker could exploit this vulnerability to gain unauthorized access to the affected systems, thereby compromising their confidentiality, integrity, and availability. This presents a significant risk to users of the EDK2 Network Package, particularly in environments where DHCPv6 is in use.

References