{
  "fix": "ovmf 0~20191122.bd85bf54-2ubuntu3.5",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-ovmf-0-20191122.bd85bf54-2ubuntu3.5",
  "summary": "ovmf 0~20191122.bd85bf54-2ubuntu3.5, released February 13, 2024, fixes 10 CVEs in ovmf. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "ovmf 0~20191122.bd85bf54-2ubuntu3.5 for Ubuntu 20.04 LTS (focal)",
  "released": "2024-02-13T16:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2023-45233, high severity",
  "supported": false,
  "cveCount": 10,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02084,
  "maxCvss": 8.8,
  "appliesTo": [
    {
      "product": "ovmf",
      "productUrl": "https://patchblox.com/security/product/linux/ovmf",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "0~20191122.bd85bf54-2ubuntu3.5",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-45232",
      "url": "https://patchblox.com/security/cve/CVE-2023-45232",
      "title": "ovmf: infinite loop in edk2 when parsing unknown options in the Destination Options header",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.02084,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-45233",
      "url": "https://patchblox.com/security/cve/CVE-2023-45233",
      "title": "ovmf: infinite loop in edk2 when parsing PadN options in the Destination Options header",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.02084,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-45235",
      "url": "https://patchblox.com/security/cve/CVE-2023-45235",
      "title": "ovmf: buffer overflow in edk2 when handling the Server ID option in a DHCPv6 proxy Advertise message.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-45230",
      "url": "https://patchblox.com/security/cve/CVE-2023-45230",
      "title": "ovmf: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-45234",
      "url": "https://patchblox.com/security/cve/CVE-2023-45234",
      "title": "ovmf: buffer overflow in edk2 when processing DNS Servers options in a DHCPv6 Advertise message.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-45231",
      "url": "https://patchblox.com/security/cve/CVE-2023-45231",
      "title": "ovmf: out-of-bounds read in edk2 when handling a ND Redirect message with truncated options",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00849,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36763",
      "url": "https://patchblox.com/security/cve/CVE-2022-36763",
      "title": "edk2-aarch64: edk2-SecurityPkg-Adding- -to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00291,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36764",
      "url": "https://patchblox.com/security/cve/CVE-2022-36764",
      "title": "edk2-aarch64: edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0029,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36765",
      "url": "https://patchblox.com/security/cve/CVE-2022-36765",
      "title": "ovmf: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0029,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-48733",
      "url": "https://patchblox.com/security/cve/CVE-2023-48733",
      "title": "edk2: An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu\u0027s EDK2",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.7,
      "epss": 0.00256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T20:04:13Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}