{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/vex/2023/cve-2023-45229-els_os-oraclelinux7els.json" } ], "tracking": { "current_release_date": "2026-11-12T03:46:14Z", "generator": { "date": "2026-11-12T03:46:14Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2023-45229-ELS_OS-ORACLELINUX7ELS", "initial_release_date": "2023-01-01T00:00:00Z", "revision_history": [ { "date": "2023-01-01T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-11-12T03:46:14Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2023-45229" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 7", "product": { "name": "Oracle Linux 7", "product_id": "Oracle-Linux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" }, { "branches": [ { "category": "product_version", "name": "OVMF-0:20180508-6.gitee3198e672e2.el7.noarch", "product": { "name": "OVMF-0:20180508-6.gitee3198e672e2.el7.noarch", "product_id": "OVMF-0:20180508-6.gitee3198e672e2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/oracle/OVMF@20180508-6.gitee3198e672e2.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch", "product": { "name": "OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch", "product_id": "OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/OVMF@20180508-6.gitee3198e672e2.el7.tuxcare.els2?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch" }, "product_reference": "OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "OVMF-0:20180508-6.gitee3198e672e2.el7.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.noarch" }, "product_reference": "OVMF-0:20180508-6.gitee3198e672e2.el7.noarch", "relates_to_product_reference": "Oracle-Linux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-45229", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "EDK2's Network Package is susceptible to an out-of-bounds read\n vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.noarch", "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-45229" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html", "url": "http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/01/16/2", "url": "http://www.openwall.com/lists/oss-security/2024/01/16/2" }, { "category": "external", "summary": "https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h", "url": "https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240307-0011/", "url": "https://security.netapp.com/advisory/ntap-20240307-0011/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html" }, { "category": "external", "summary": "https://www.kb.cert.org/vuls/id/132380", "url": "https://www.kb.cert.org/vuls/id/132380" } ], "release_date": "2024-01-16T16:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-10-29T16:14:08.210168Z", "details": "This flaw lives in the UEFI firmware’s EDK2 DHCPv6 client and is only reachable during pre‑boot IPv6 network operations (e.g., when the firmware is performing DHCPv6 for network boot), not after the OS has started using its own network stack. It requires an attacker on the same Layer‑2 segment to target the brief DHCPv6 Advertise exchange, and it is an out‑of‑bounds read with confidentiality‑only impact (no integrity or availability effect). Given this narrow, pre‑boot, adjacent‑network exposure, it is low‑priority for typical VM and server deployments that boot from local disks or do not use firmware‑level IPv6 DHCP.", "product_ids": [ "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.noarch", "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.noarch", "Oracle-Linux-7:OVMF-0:20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }