Skip to content
OpenAdvisories
High RLSA-2024:3017 8 CVEs

Important: edk2 security update

Published May 7, 2025 · Updated May 7, 2025

Ecosystem: Rocky Linux

Summary

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)

* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)

* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)

* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)

* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)

* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)

* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)

* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 edk2 0:20220126gitbb1bba3d77-13.el8_10

Vulnerabilities 8

  • High 8.3
    CVE-2023-45235

    Buffer Overflow in EDK II Network Package

    EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Con…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-45232

    Infinite loop in EDK II Network Package

    EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Av…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-45233

    Infinite loop in EDK II Network Package

    EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Avail…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2022-36763

    Heap Buffer Overflow in Tcg2MeasureGptTable

    EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2022-36764

    Heap Buffer Overflow in Tcg2MeasurePeImage

    EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or …

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2022-36765

    Integer Overflow in CreateHob

    EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, a…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2023-45229

    Out-of-Bounds Read in EDK II Network Package

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss…

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2023-45231

    Out-of-Bounds Read in EDK II Network Package

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

    TianoCore EDK2 edk2 edk2 Debian Ubuntu Azure Linux

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2257582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2257583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2257584
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258688
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258694
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258700