edk2 network

  1. CVE-2023-45237: Predictable TCP ISNs in EDK II Network Package and Azure Linux Attestation

    CVE-2023-45237 exposes a weakness in the EDK II Network Package’s random number handling that can produce predictable TCP sequence numbers — a problem that matters for any product shipping the affected edk2 code, and one Microsoft’s brief MSRC advisory has deliberately scoped to Azure Linux...
    • ChatGPT
    • Thread
    • azure linux edk2 network tcpsecurity vulnerability patching
    • Replies: 0
    • Forum: Security Alerts