{"id":"CVE-2023-45236","aliases":["ALSA-2024:4749","ALSA-2024:5297","AZL-38425","AZL-39388","AZL-39454","BELL-CVE-2023-45236","CLSA-2025-1764062286","DEBIAN-CVE-2023-45236","EUVD-2023-49542","GHSA-fqc4-ffq5-4r98","GHSA-hc6x-cw6p-gj7h","OESA-2024-2301","RHSA-2024:4419","RHSA-2024:4749","RHSA-2024:5297","RLSA-2024:5297","SUSE-SU-2025:0407-1","SUSE-SU-2025:0421-1","SUSE-SU-2025:0503-1","SUSE-SU-2025:0608-1","SUSE-SU-2025:0609-1","SUSE-SU-2025:0690-1","UBUNTU-CVE-2023-45236","USN-7894-1","openSUSE-SU-2024:14336-1"],"status":"published","title":"Predictable TCP ISNs in EDK II Network Package","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","severity":{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00994,"percentile":0.62921,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-338"],"published":"2024-01-16T16:10:38Z","modified":"2026-10-29T11:31:47Z","fixes":[{"ecosystem":"Azure Linux:3","package":"edk2","fixed_in":["20240223gitedc6681206c1-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"hvloader","fixed_in":["1.0.1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"edk2","fixed_in":["20230301gitf80f052277c8-40"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"edk2","fixed_in":["2024.05-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"edk2","fixed_in":["2024.05-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220126gitbb1bba3d77-13.el8_10.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220126gitbb1bba3d77-13.el8_10.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240223gitedc6681206c1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"hvloader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230301gitf80f052277c8-40"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202208-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202302-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2022.11-6","2022.11-6+deb12u1","2022.11-6+deb12u2","2023.02-1","2023.02-2","2023.05-1","2023.05-2","2023.08-1","2023.11-1","2023.11-2","2023.11-3","2023.11-4","2023.11-5","2023.11-6","2023.11-7","2023.11-8","2024.02-1","2024.02-2","2024.05-1","2024.05-2","2024.08-1","2024.08-2","2024.08-3","2024.08-4","2024.11-1","2024.11-2","2024.11-3","2024.11-4","2024.11-5","2025.02-1","2025.02-10","2025.02-2","2025.02-3","2025.02-4","2025.02-5","2025.02-6","2025.02-7","2025.02-8","2025.02-9","2025.05-1","2025.05-2","2025.08.01-1","2025.08.01-2","2025.08.01-3","2025.08.01-4","2025.08.01-5","2025.08.01-6","2025.11-1","2025.11-2","2025.11-3","2025.11-4","2025.11-5","2026.02-1","2026.02-2","2026.02-3","2026.05-1","2026.05-2","2026.05-3","2026.08+ds-1","2026.08+ds-2"]},{"source":"osv","ecosystem":"Debian:13","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.05-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.05-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-22.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-23.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-26.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-22.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-14.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"edk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"edk2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20221207gitfff6d81270b5-9.el9_2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9_4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.9.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.9.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.9.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-150600.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202208-150500.6.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202202-150400.5.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1","0~20160408.ffea0a2c-2ubuntu0.2+esm3","0~20160408.ffea0a2c-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3","0~20180205.c0d9813c-2ubuntu0.3+esm1","0~20180205.c0d9813c-2ubuntu0.3+esm2","0~20180205.c0d9813c-2ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4","0~20191122.bd85bf54-2ubuntu3.5","0~20191122.bd85bf54-2ubuntu3.6","0~20191122.bd85bf54-2ubuntu3.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2","2022.02-3ubuntu0.22.04.3","2022.02-3ubuntu0.22.04.4","2022.02-3ubuntu0.22.04.5","2022.02-3ubuntu0.22.04.6","2022.02-3ubuntu0.22.04.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2023.05-2","2023.11-2","2023.11-3","2023.11-4","2023.11-5","2023.11-6","2023.11-8","2024.02-1","2024.02-2","2024.02-2ubuntu0.1","2024.02-2ubuntu0.3","2024.02-2ubuntu0.4","2024.02-2ubuntu0.5","2024.02-2ubuntu0.6","2024.02-2ubuntu0.7","2024.02-2ubuntu0.8","2024.02-2ubuntu0.9","2024.02-2ubuntu0.10"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.4"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1","2022.02-3ubuntu0.22.04.2","2022.02-3ubuntu0.22.04.3"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.02-2ubuntu0.6"}]}],"versions":["2023.05-2","2023.11-2","2023.11-3","2023.11-4","2023.11-5","2023.11-6","2023.11-8","2024.02-1","2024.02-2","2024.02-2ubuntu0.1","2024.02-2ubuntu0.3","2024.02-2ubuntu0.4","2024.02-2ubuntu0.5"],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202405-1.1"}]}],"bundled":3}],"products":[{"vendor":"tianocore","product":"edk2"}],"references":[{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h","tags":["x_transferred","Vendor Advisory","advisory","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/16/2","tags":["x_transferred","Mailing List","advisory","article"]},{"url":"https://security.netapp.com/advisory/ntap-20240307-0011/","tags":["x_transferred","advisory"]},{"url":"https://www.kb.cert.org/vuls/id/132380","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45236","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240307-0011"},{"url":"https://github.com/advisories/GHSA-fqc4-ffq5-4r98","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36765","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45236","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45237","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257584","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258703","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258706","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-4749.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1298","tags":["report"]},{"url":"https://bugzilla.redhat.com/2284243","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-5297.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-45236","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1764062286.html","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html","tags":["web"]},{"url":"http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45236","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45237","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4419","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258706","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4419.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45229","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45229","tags":["advisory"]},{"url":"https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45231","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pr27-mhpp-2ccr","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45235","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45235","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h9v6-q439-p7j2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45236","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45237","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fxqf-p2p3-gxvr","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257584","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4749.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36765","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36765","tags":["advisory"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-ch4w-v7m3-g8wx","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2284243","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5297.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1298","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1298","tags":["advisory"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-chfw-xj8f-6m53","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:5297","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250407-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218879","tags":["report"]},{"url":"https://bugzilla.suse.com/1218880","tags":["report"]},{"url":"https://bugzilla.suse.com/1218881","tags":["report"]},{"url":"https://bugzilla.suse.com/1218882","tags":["report"]},{"url":"https://bugzilla.suse.com/1218883","tags":["report"]},{"url":"https://bugzilla.suse.com/1218884","tags":["report"]},{"url":"https://bugzilla.suse.com/1218885","tags":["report"]},{"url":"https://bugzilla.suse.com/1218886","tags":["report"]},{"url":"https://bugzilla.suse.com/1218887","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45237","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250421-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250503-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225889","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1298","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250608-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237084","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250609-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250690-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-45236","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/16/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7894-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7894-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-5678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-6237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-1298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-2511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-4741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-5535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-6119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-9143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-13176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-2295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-9232","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25742","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-45236","title":"Predictable TCP ISNs in EDK II Network Package","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:10:38.262Z","modified":"2025-11-04T18:17:41.127Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:22.984825Z"}],"euvd":[{"id":"EUVD-2023-49542","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:10:38Z","modified":"2025-11-04T18:17:41Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:24.543935Z"}],"ghsa":[{"id":"GHSA-fqc4-ffq5-4r98","title":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n...","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T18:31:10Z","modified":"2025-11-04T21:31:04Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-338"],"updated_at":"2026-11-02T15:04:36.536202Z"}],"nvd":[{"id":"CVE-2023-45236","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:12.82Z","modified":"2026-06-17T06:28:30.453Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-200","CWE-338"],"updated_at":"2026-11-02T14:09:01.900189Z"}],"osv":[{"id":"AZL-38425","title":"CVE-2023-45236 affecting package edk2 for versions less than 20240223gitedc6681206c1-1","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:12Z","modified":"2026-04-21T04:48:06.227875Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39388","title":"CVE-2023-45236 affecting package hvloader for versions less than 1.0.1-3","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:12Z","modified":"2026-04-21T04:28:43.212054Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39454","title":"CVE-2023-45236 affecting package edk2 for versions less than 20230301gitf80f052277c8-40","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:12Z","modified":"2026-04-21T04:28:43.543244Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"BELL-CVE-2023-45236","status":"published","published":"2024-01-17T05:57:08.317742Z","modified":"2026-01-26T09:35:32.593221Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-45229","description":"EDK2's Network Package is susceptible to an out-of-bounds read\n vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:11.533Z","modified":"2026-10-20T10:59:08.371726897Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45230","description":"EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.","status":"published","published":"2024-01-16T16:15:11.727Z","modified":"2026-10-20T11:02:25.749560235Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45231","description":"EDK2's Network Package is susceptible to an out-of-bounds read\n vulnerability when processing  Neighbor Discovery Redirect message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:11.91Z","modified":"2026-10-20T11:02:25.755047689Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45232","description":"EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.","status":"published","published":"2024-01-16T16:15:12.09Z","modified":"2026-10-20T11:02:25.656579888Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45233","description":"EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.","status":"published","published":"2024-01-16T16:15:12.277Z","modified":"2026-10-20T10:59:08.122816541Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45234","description":"EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.","status":"published","published":"2024-01-16T16:15:12.46Z","modified":"2026-10-20T10:59:10.02066497Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45235","description":"EDK2's Network Package is susceptible to a buffer overflow vulnerability when\n\n\n\n\n\nhandling Server ID option \n\n\n\n from a DHCPv6 proxy Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.","status":"published","published":"2024-01-16T16:15:12.643Z","modified":"2026-10-20T10:59:07.984947477Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45236","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:12.82Z","modified":"2026-10-20T10:59:07.483605971Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"CVE-2023-45237","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:13.013Z","modified":"2026-10-20T10:59:08.123628436Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DEBIAN-CVE-2023-45236","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This  vulnerability can be exploited by an attacker to gain unauthorized  access and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:12.82Z","modified":"2026-10-26T18:02:58.347684901Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2024-2301","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n \nEDK2\u0026apos;s Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.\r\n\r\n\r\n\r\n(CVE-2023-45236)\r\n\r\n \nEDK2\u0026apos;s Network Package is susceptible to a predictable TCP Initial Sequence Number. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.\r\n\r\n\r\n\r\n(CVE-2023-45237)","status":"published","published":"2024-10-25T11:07:46Z","modified":"2026-08-18T01:17:35.797322499Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:4419","title":"Red Hat Security Advisory: edk2 security update","status":"published","published":"2024-09-23T18:00:13Z","modified":"2026-06-26T12:22:32.049076815Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4749","title":"Red Hat Security Advisory: edk2 security update","status":"published","published":"2024-09-16T19:13:49Z","modified":"2026-06-26T12:22:32.54650329Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:5297","title":"Red Hat Security Advisory: edk2 security update","status":"published","published":"2024-09-16T20:21:03Z","modified":"2026-03-18T11:35:24.223505Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2024:5297","title":"Moderate: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)\n\n* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)\n\n* edk2: Temporary DoS vulnerability (CVE-2024-1298)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T20:08:44.798981Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2023-45236","description":"EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This  vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.","status":"published","published":"2024-01-16T16:15:00Z","modified":"2026-10-05T19:20:38.328968088Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:4749","title":"Moderate: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)\n* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)\n* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-23T00:00:00Z","modified":"2026-10-29T11:31:47.147096536Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:5297","title":"Moderate: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)\n* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)\n* edk2: Temporary DoS vulnerability (CVE-2024-1298)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-08-13T00:00:00Z","modified":"2026-10-29T11:02:21.594641216Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1764062286","title":"edk2: Fix of 2 CVEs","description":"- CVE-2023-45236: fix TCP Initial Sequence Number generation in NetworkPkg\n  to prevent predictable sequence numbers\n- CVE-2023-45237: fix weak pseudo-random number generator in NetworkPkg\n  to prevent predictable TCP sequence numbers","status":"published","published":"2025-11-25T09:18:10Z","modified":"2026-06-01T00:31:17.207227194Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"openSUSE-SU-2024:14336-1","title":"ovmf-202405-1.1 on GA media","description":"These are all security issues fixed in the ovmf-202405-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-13T00:00:00Z","modified":"2026-02-04T03:26:07.931698Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2025:0407-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise messages.\n  (bsc#1218879)\n- CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. (bsc#1218880)\n- CVE-2023-45231: out-of-bounds read in edk2 when handling a ND Redirect message with truncated options. (bsc#1218881)\n- CVE-2023-45232: infinite loop in edk2 when parsing unknown options in the Destination Options header. (bsc#1218882)\n- CVE-2023-45233: infinite loop in edk2 when parsing PadN options in the Destination Options header. (bsc#1218883)\n- CVE-2023-45234: buffer overflow in edk2 when processing DNS Servers options in a DHCPv6 Advertise message.\n  (bsc#1218884)\n- CVE-2023-45235: buffer overflow in edk2 when handling the Server ID option in a DHCPv6 proxy Advertise message.\n  (bsc#1218885)\n- CVE-2023-45236: predictable TCP Initial Sequence Numbers in edk2 network packages. (bsc#1218886)\n- CVE-2023-45237: use of a weak pseudorandom number generator in edk2. (bsc#1218887)\n","status":"published","published":"2025-02-10T13:56:35Z","modified":"2026-02-04T02:22:36.038205Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0421-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n  \n- CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise messages.\n  (bsc#1218879)\n- CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. (bsc#1218880)\n- CVE-2023-45231: out-of-bounds read in edk2 when handling a ND Redirect message with truncated options. (bsc#1218881)\n- CVE-2023-45232: infinite loop in edk2 when parsing unknown options in the Destination Options header. (bsc#1218882)\n- CVE-2023-45233: infinite loop in edk2 when parsing PadN options in the Destination Options header. (bsc#1218883)\n- CVE-2023-45234: buffer overflow in edk2 when processing DNS Servers options in a DHCPv6 Advertise message.\n  (bsc#1218884)\n- CVE-2023-45235: buffer overflow in edk2 when handling the Server ID option in a DHCPv6 proxy Advertise message.\n  (bsc#1218885)\n- CVE-2023-45236: predictable TCP Initial Sequence Numbers in edk2 network packages. (bsc#1218886)\n- CVE-2023-45237: use of a weak pseudorandom number generator in edk2. (bsc#1218887)\n","status":"published","published":"2025-02-11T10:28:25Z","modified":"2026-02-04T03:34:00.771401Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0503-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- CVE-2024-1298: potential division-by-zero crash in edk2 due to UINT32 overflow in S3 ResumeCount. (bsc#1225889)\n- CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise messages.\n  (bsc#1218879)\n- CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. (bsc#1218880)\n- CVE-2023-45231: out-of-bounds read in edk2 when handling a ND Redirect message with truncated options. (bsc#1218881)\n- CVE-2023-45232: infinite loop in edk2 when parsing unknown options in the Destination Options header. (bsc#1218882)\n- CVE-2023-45233: infinite loop in edk2 when parsing PadN options in the Destination Options header. (bsc#1218883)\n- CVE-2023-45234: buffer overflow in edk2 when processing DNS Servers options in a DHCPv6 Advertise message.\n  (bsc#1218884)\n- CVE-2023-45235: buffer overflow in edk2 when handling the Server ID option in a DHCPv6 proxy Advertise message.\n  (bsc#1218885)\n- CVE-2023-45236: predictable TCP Initial Sequence Numbers in edk2 network packages. (bsc#1218886)\n- CVE-2023-45237: use of a weak pseudorandom number generator in edk2. (bsc#1218887)\n","status":"published","published":"2025-02-13T10:12:12Z","modified":"2026-02-04T04:31:38.302429Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0608-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084).\n","status":"published","published":"2025-02-21T10:31:14Z","modified":"2026-02-04T04:12:07.398895Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0609-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084).\n","status":"published","published":"2025-02-21T10:33:48Z","modified":"2026-02-04T03:35:14.072751Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0690-1","title":"Security update for ovmf","description":"This update for ovmf fixes the following issues:\n\n- PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084).\n","status":"published","published":"2025-02-24T13:06:14Z","modified":"2025-05-02T04:35:32.19413Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"USN-7894-1","title":"edk2 vulnerabilities","description":"It was discovered that EDK II was susceptible to a predictable TCP Initial\nSequence Number. An attacker could possibly use this issue to gain\nunauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu\n24.04 LTS. (CVE-2023-45236, CVE-2023-45237)\n\nIt was discovered that EDK II incorrectly handled S3 sleep. An attacker\ncould possibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)\n\nIt was discovered that the EDK II PE/COFF loader incorrectly handled\ncertain memory operations. An attacker could possibly use this issue to\ncause a denial of service, obtain sensitive information, or execute\narbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu\n24.04 LTS. (CVE-2024-38796)\n\nIt was discovered that the EDK II PE image hashing function incorrectly\nhandled certain memory operations. An attacker could possibly use this\nissue to cause a denial of service, or execute arbitrary code.\n(CVE-2024-38797)\n\nIt was discovered that the EDK II BIOS incorrectly handled certain memory\noperations. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2024-38805, CVE-2025-2295)\n\nIt was discovered that EDK II incorrectly handled the enabling of MCE. An\nattacker could possibly use this issue to cause a denial of service, or\nexecute arbitrary code. (CVE-2025-3770)\n\nIt was discovered that the OpenSSL library embedded in EDK II contained\nmultiple vulnerabilties. An attacker could possibly use these issues to\ncause a denial of service, obtain sensitive information, or execute\narbitrary code. (CVE-2021-3712, CVE-2022-0778, CVE-2022-4304,\nCVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-0465,\nCVE-2023-0466, CVE-2023-2650, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678,\nCVE-2023-6237, CVE-2024-0727, CVE-2024-13176, CVE-2024-2511,\nCVE-2024-41996, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-9143,\nCVE-2025-9232)","status":"published","published":"2025-11-26T15:05:43Z","modified":"2026-11-09T12:46:35.954753636Z","updated_at":"2026-11-09T12:55:09.79476Z"}]}}