RHSA-2024:1004: Important: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1004?
The severity of RHSA-2024:1004 has been classified as important.
How do I fix RHSA-2024:1004?
To fix RHSA-2024:1004, update the edk2 and edk2-ovmf packages to version 20190829git37eef91017ad-9.el8_2.3.
What vulnerability is addressed in RHSA-2024:1004?
RHSA-2024:1004 addresses a buffer overflow vulnerability in the DHCPv6 client via a long Server ID option (CVE-2023-45230).
What systems are affected by RHSA-2024:1004?
RHSA-2024:1004 affects specific versions of the edk2 and edk2-ovmf packages on Red Hat Enterprise Linux systems.
Is CVE-2023-45230 a remote vulnerability?
Yes, CVE-2023-45230 can be exploited remotely due to the nature of the buffer overflow in the DHCPv6 client.