Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug]: Weird issue #3

Closed
1 task done
Javagedes opened this issue Jan 30, 2024 · 2 comments
Closed
1 task done

[Bug]: Weird issue #3

Javagedes opened this issue Jan 30, 2024 · 2 comments
Assignees
@Javagedes
Labels
state:needs-maintainer-feedback Needs more information from a maintainer to determine next steps state:needs-triage Needs to triaged to determine next steps state:stale Has not been updated in a long time urgency:medium Important with a moderate impact

Comments

@Javagedes
Copy link
Owner

Is there an existing issue for this?

  • I have searched existing issues

Current Behavior

wow

Expected Behavior

bad

Steps To Reproduce

  1. do this

Build Environment

- OS(s):
- Tool Chain(s):
- Targets Impacted:

Version Information

1.1.1

Urgency

Medium

Are you going to fix this?

Someone else needs to fix it

Do you need maintainer feedback?

Maintainer feedback requested

Anything else?

No response
@github-actions github-actions bot added urgency:medium Important with a moderate impact state:needs-maintainer-feedback Needs more information from a maintainer to determine next steps state:needs-owner Needs an issue owner to be assigned state:needs-triage Needs to triaged to determine next steps labels Jan 30, 2024
@Javagedes Javagedes self-assigned this Jan 30, 2024
@github-actions github-actions bot removed the state:needs-owner Needs an issue owner to be assigned label Jan 30, 2024
@github-actions GitHub Actions
Copy link

This issue has been automatically marked as stale because it has not had activity in 45 days. It will be closed if no further activity occurs within 7 days. Thank you for your contributions.

@github-actions github-actions bot added the state:stale Has not been updated in a long time label Mar 15, 2024
@github-actions GitHub Actions
Copy link

This issue has been automatically been closed because it did not have any activity in 45 days and no follow up within 7 days after being marked stale. Thank you for your contributions.

@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Mar 23, 2024
Javagedes pushed a commit that referenced this issue Jun 24, 2024
@Flickdm @mergify
NetworkPkg: Ip6Dxe: SECURITY PATCH CVE-2023-45231 Patch
bbfee34 
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=4536

Bug Overview:
PixieFail Bug #3
CVE-2023-45231
CVSS 6.5 : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

Out-of-bounds read when handling a ND Redirect message with truncated
options

Change Overview:

Adds a check to prevent truncated options from being parsed
+  //
+  // Cannot process truncated options.
+  // Cannot process options with a length of 0 as there is no Type
field.
+  //
+  if (OptionLen < sizeof (IP6_OPTION_HEADER)) {
+    return FALSE;
+  }

Cc: Saloni Kasbekar <[email protected]>
Cc: Zachary Clark-williams <[email protected]>

Signed-off-by: Doug Flick [MSFT] <[email protected]>
Reviewed-by: Saloni Kasbekar <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Javagedes Javagedes

Labels
state:needs-maintainer-feedback Needs more information from a maintainer to determine next steps state:needs-triage Needs to triaged to determine next steps state:stale Has not been updated in a long time urgency:medium Important with a moderate impact
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Javagedes