CVE-2023-45237

概要

参考情報

• openwall.com/lists/oss-security/2024/01/16/2 · Mailing List
• tianocore/edk2 security advisory · Vendor Advisory
• security.netapp.com/advisory/ntap-20240307-0011
• kb.cert.org/vuls/id/132380

edk2 のその他の脆弱性

• CVE-2026-111497緊急 9.8悪用確認済み（CISA KEV）A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows…
• CVE-2025-2486高 8.8The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing byp…
• CVE-2023-49721中 6.7An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.
• CVE-2023-48733中 6.7An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot…
• CVE-2023-45236高 7.5EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to g…