CVE-2023-45234

highPriorität · verfolgen · 35EPSS 0.012 · 68. PerzentilCHDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.19% (68th) EPSS
CVSS 8.8 · high
Is it mine?
119 products
Prüfe deine Angriffsfläche
Who says so?
9 sources
cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenedk2-0:20220126gitbb1bba3d77-6.el8_9.6.src as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1063
  • Behobenedk2-aarch64-0:20220126gitbb1bba3d77-6.el8_9.6.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1063
  • Behobenedk2-ovmf-0:20220126gitbb1bba3d77-6.el8_9.6.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1063
  • Behobenedk2-0:20230524-4.el9_3.2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-aarch64-0:20230524-4.el9_3.2.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-aarch64-0:20230524-4.el9_3.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-debugsource-0:20230524-4.el9_3.2.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-debugsource-0:20230524-4.el9_3.2.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-ovmf-0:20230524-4.el9_3.2.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-ovmf-0:20230524-4.el9_3.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-tools-0:20230524-4.el9_3.2.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-tools-0:20230524-4.el9_3.2.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-tools-debuginfo-0:20230524-4.el9_3.2.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-tools-debuginfo-0:20230524-4.el9_3.2.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-tools-doc-0:20230524-4.el9_3.2.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1075
  • Behobenedk2-0:20221207gitfff6d81270b5-9.el9_2.2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-tools-0:20221207gitfff6d81270b5-9.el9_2.2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-tools-0:20221207gitfff6d81270b5-9.el9_2.2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-tools-doc-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1076
  • Behobenedk2-0:20220126gitbb1bba3d77-3.el9_0.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1077
  • Behobenedk2-aarch64-0:20220126gitbb1bba3d77-3.el9_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1077
  • Behobenedk2-ovmf-0:20220126gitbb1bba3d77-3.el9_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1077
  • Behobenedk2-0:20200602gitca407c7246bf-4.el8_4.5.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1305
  • Behobenedk2-0:20200602gitca407c7246bf-4.el8_4.5.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1305
  • Behobenedk2-0:20200602gitca407c7246bf-4.el8_4.5.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1305
  • Behobenedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.5.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1305
  • Behobenedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.5.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1305
  • Behobenedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.5.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1305
  • Behobenedk2-0:20190829git37eef91017ad-9.el8_2.4.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1722
  • Behobenedk2-0:20190829git37eef91017ad-9.el8_2.4.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1722
  • Behobenedk2-0:20190829git37eef91017ad-9.el8_2.4.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1722
  • Behobenedk2-ovmf-0:20190829git37eef91017ad-9.el8_2.4.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1722
  • Behobenedk2-ovmf-0:20190829git37eef91017ad-9.el8_2.4.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1722
  • Behobenedk2-ovmf-0:20190829git37eef91017ad-9.el8_2.4.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:1722
  • Behobenedk2-0:20220126gitbb1bba3d77-2.el8_6.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:3497
  • Behobenedk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:3497
  • Behobenedk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf

    For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:3497
  • BehobenAPC2200abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenAPC3100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenAPC4100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenAPC910abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenC80abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenMPC3100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC1200abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC2200abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC3100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC900abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • Behobenovmf-0:2017+git1510945757.b2662641d5-3.55.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenovmf-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenovmf-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenovmf-tools-0:2017+git1510945757.b2662641d5-3.55.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenovmf-tools-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenovmf-tools-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenqemu-ovmf-x86_64-0:2017+git1510945757.b2662641d5-3.55.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenqemu-ovmf-x86_64-0:2017+git1510945757.b2662641d5-3.55.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenqemu-uefi-aarch64-0:2017+git1510945757.b2662641d5-3.55.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • BehobenAPC2200cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenAPC3100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenAPC4100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenAPC910cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenC80cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenMPC3100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC1200cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC2200cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC3100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenPPC900cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • MitigationAPC2200abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC3100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC4100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC910abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationC80abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationMPC3100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC1200abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC2200abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC3100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC900abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC2200cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC3100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC4100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC910cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationC80cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationMPC3100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC1200cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC2200cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC3100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC900cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • Workaroundedk2-0:20220126gitbb1bba3d77-6.el8_9.6.src as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20220126gitbb1bba3d77-6.el8_9.6.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-6.el8_9.6.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20230524-4.el9_3.2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20230524-4.el9_3.2.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20230524-4.el9_3.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-debugsource-0:20230524-4.el9_3.2.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-debugsource-0:20230524-4.el9_3.2.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20230524-4.el9_3.2.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20230524-4.el9_3.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-0:20230524-4.el9_3.2.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-0:20230524-4.el9_3.2.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-debuginfo-0:20230524-4.el9_3.2.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-debuginfo-0:20230524-4.el9_3.2.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-doc-0:20230524-4.el9_3.2.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20221207gitfff6d81270b5-9.el9_2.2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-0:20221207gitfff6d81270b5-9.el9_2.2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-0:20221207gitfff6d81270b5-9.el9_2.2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.2.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.2.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-doc-0:20221207gitfff6d81270b5-9.el9_2.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20220126gitbb1bba3d77-3.el9_0.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20220126gitbb1bba3d77-3.el9_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-3.el9_0.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20200602gitca407c7246bf-4.el8_4.5.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20200602gitca407c7246bf-4.el8_4.5.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20200602gitca407c7246bf-4.el8_4.5.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.5.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.5.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.5.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20190829git37eef91017ad-9.el8_2.4.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20190829git37eef91017ad-9.el8_2.4.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20190829git37eef91017ad-9.el8_2.4.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20190829git37eef91017ad-9.el8_2.4.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20190829git37eef91017ad-9.el8_2.4.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20190829git37eef91017ad-9.el8_2.4.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20220126gitbb1bba3d77-2.el8_6.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–8.8

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 5.9
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.18.3highAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · FSTEC (BDU) RU
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · ENISA EU
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · infosec@edk2.groups.ioAusnutzbarkeit 2.8 · Auswirkung 5.5
v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · OSV
v3.18.1highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H/E:P/RL:O/RC:Csecondary · ABB PSIRT
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · SUSE Product Security
v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-119USprimärCWE-119USCWE-119USCWE-119USCWE-119USCWE-120US
05

betroffene Produkte (119)

Betroffene Produkte und Versionsbereiche.

20 von 119 angezeigt
06

Advisories (19)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2024:1063Red Hat Security Advisory: edk2 security update2024-03-04csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:1075Red Hat Security Advisory: edk2 security update2024-03-05csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:1076Red Hat Security Advisory: edk2 security update2024-03-05csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:1077Red Hat Security Advisory: edk2 security update2024-03-05csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:1305Red Hat Security Advisory: edk2 security update2024-03-13csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:1722Red Hat Security Advisory: edk2 security update2024-04-09csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.2 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:3497Red Hat Security Advisory: edk2 security update2024-05-30csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • SA24P003​B&R PCs vulnerable to PixieFail attack​2026-01-29csaf · abb_psirtCH

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS attacks, conduct DNS cache poisoning, or extract sensitive information.

  • SUSE-SU-2026:0196-1Security update for ovmf2026-01-21csaf · suse_csafDE

    Security update for ovmf

  • WID-SEC-W-2024-0126EDK2 NetworkPkg IP stack implementation: Mehrere SchwachstellenDeutsch2024-01-16csaf · cert_bundDE

    Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der EDK2 NetworkPkg IP stack implementation ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand auszulösen.

  • ICSA-26-141-02ABB B&R PCs2026-01-29icsa · cisa_csaf_otUS

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS attacks, conduct DNS cache poisoning, or extract sensitive information.

  • CVE-2023-452292024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

  • CVE-2023-452302024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

  • CVE-2023-452312024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

  • CVE-2023-452322024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

  • CVE-2023-452332024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

  • CVE-2023-452352024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

  • CVE-2023-452362024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

  • CVE-2023-452372024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bduosvabb_psirtcert_bundredhat_csafsuse_csafcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2024-01-16geändert 2026-06-17
10

Referenzen (19)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan