PixieFail flaws impact PXE network boot in enterprise systems
ID: c4712a7b-376b-50e6-909b-9c11451c7bcb
STIX ID: report--c4712a7b-376b-50e6-909b-9c11451c7bcb
Feed Name: Bleeping Computer
Threat Score
PixieFail is a collection of nine vulnerabilities in Tianocore's EDK II IPv6 PXE network stack that affect PXE network boot functionality used by many vendors; issues include buffer overflows, integer underflow, infinite loops, predictable TCP ISNs, and weak RNGs leading to DoS, information disclosure, and potential remote code execution. Public PoCs exist, multiple major vendors are impacted, and fixes are incomplete or in testing, making network-booted enterprise systems and servers at heightened risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.