CVE-2023-45235 (published 2024-01-16T16:11:41.215Z)
 EDK2's Network Package is susceptible to a buffer overflow vulnerability when





handling Server ID option 



 from a DHCPv6 proxy Advertise message. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.


Affected products: Vendor: TianoCore
Product: edk2
Versions: edk2-stable202308