Out-of-Bounds Read in EDK II Network Package
CVE-2023-45231
6.5MEDIUM
What is CVE-2023-45231?
The Network Package of EDK2 is prone to an out-of-bounds read issue which arises while handling Neighbor Discovery Redirect messages. Exploitation of this vulnerability allows an attacker to gain unauthorized access, potentially compromising the confidentiality of sensitive information. Organizations utilizing EDK2 should take measures to assess their exposure to this vulnerability and implement appropriate security controls.
Affected Version(s)
edk2 edk2-stable202308
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Quarkslab Vulnerability Reports Team
Doug Flick