REDHAT-BUG-2257584: Buffer Overflow

Published Jan 10, 2024

Updated

EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.

https://github.com/tianocore/edk2/security/advisories/GHSA-ch4w-v7m3-g8wx

Affected Software

1 affected component

Tianocore edk2

Event History

Jan 10, 2024

Data Sourced

via Red Hat·06:12 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2257584?

The severity of REDHAT-BUG-2257584 is considered high due to the potential for compromise of confidentiality, integrity, and availability.

How do I fix REDHAT-BUG-2257584?

To fix REDHAT-BUG-2257584, apply the latest security patches provided for the TianoCore EDK2 software.

What systems are affected by REDHAT-BUG-2257584?

REDHAT-BUG-2257584 affects the TianoCore EDK2 software.

What type of attack can REDHAT-BUG-2257584 enable?

REDHAT-BUG-2257584 can enable an integer overflow to buffer overflow attack via a local network.

What are the potential consequences of exploiting REDHAT-BUG-2257584?

Exploitation of REDHAT-BUG-2257584 may result in compromised confidentiality, integrity, and availability of the affected systems.