Skip to content
OpenAdvisories
High RHSA-2024:8104 2 CVEs

Red Hat Security Advisory: edk2 security update

Published Oct 15, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream edk2 0:20220126gitbb1bba3d77-4.el8_8.6
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream edk2-aarch64 0:20220126gitbb1bba3d77-4.el8_8.6
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream edk2-ovmf 0:20220126gitbb1bba3d77-4.el8_8.6

Vulnerabilities 2

  • High 7.5
    CVE-2023-45232

    Infinite loop in EDK II Network Package

    EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Av…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-45233

    Infinite loop in EDK II Network Package

    EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Avail…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258694
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8104.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-45232
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-45232
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-45232
  • article
    https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html
  • advisory
    https://github.com/advisories/GHSA-3r3p-444m-2g4p
  • report
    https://access.redhat.com/security/cve/CVE-2023-45233
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-45233
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-45233
  • advisory
    https://github.com/advisories/GHSA-p9h6-p7cr-7842