{"metadata": {"vulnerability": "CVE-2023-45237", "count": 193, "kinds": {"milestone": 28, "sighting": 7, "kev": 0, "other": 158}}, "data": [{"timestamp": "2023-10-05T20:48:19.879Z", "date_only": false, "value": "2023-10-05T20:48:19.879Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-45237", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:38.474Z", "date_only": false, "value": "2023-12-13T01:20:38.474785Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-45237", "record": "GSD-2023-45237", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-01T08:00:00Z", "date_only": false, "value": "2024-01-01T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-09T00:00:00Z", "date_only": false, "value": "2024-01-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-10T00:00:00Z", "date_only": false, "value": "2024-01-10T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "vulnerabilities.4.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "vulnerabilities.4.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T16:11:11.556Z", "date_only": false, "value": "2024-01-16T16:11:11.556Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-45237", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T16:15:00Z", "date_only": false, "value": "2024-01-16T16:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-45237", "record": "UBUNTU-CVE-2023-45237", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T16:15:13Z", "date_only": false, "value": "2024-01-16T16:15:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FXQF-P2P3-GXVR", "record": "GHSA-FXQF-P2P3-GXVR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-16T16:15:13.013Z", "date_only": false, "value": "2024-01-16T16:15:13.013", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-45237", "record": "FKIE_CVE-2023-45237", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T16:15:13.013Z", "date_only": false, "value": "2024-01-16T16:15:13.013", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-45237", "record": "GSD-2023-45237", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-16T18:31:10Z", "date_only": false, "value": "2024-01-16T18:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FXQF-P2P3-GXVR", "record": "GHSA-FXQF-P2P3-GXVR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "vulnerabilities.8.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-17T05:57:08.503Z", "date_only": false, "value": "2024-01-17T05:57:08.503078Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2023-45237", "record": "BELL-CVE-2023-45237", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-17T15:31:55Z", "date_only": false, "value": "2024-01-17T15:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/3985", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "552cc7e6-a002-4cac-b6f0-0d304044834e", "content": "\u200b\u26a1\ufe0fPixieFAIL: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 UEFI\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Quarkslab \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Tianocore EDK II, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 UEFI, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n9 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043e\u0431\u0449\u0435\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 PixieFAIL, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u044d\u0448\u0430 DNS \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439. \u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0441\u043c\u043e\u0442\u0440\u0430 NetworkPkg, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Microsoft, ARM, Insyde, Phoenix Technologies \u0438 AMI. \u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 Quarkslab \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u0438 Tianocore EDK II \u043e\u0442 Microsoft \u2014 Project Mu.\n\n\u0414\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043f\u043e\u0434 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE:\n\nCVE-2023-45229: \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0446\u0438\u0439 IANA/IATA \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6 Advertise;\n\nCVE-2023-45230: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 DHCPv6 \u0438\u0437-\u0437\u0430 \u0434\u043b\u0438\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 Server ID;\n\nCVE-2023-45231: \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0443\u0441\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 ND Redirect;\n\nCVE-2023-45232: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45233: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043e\u043f\u0446\u0438\u0438 PadN \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45234: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6;\n\nCVE-2023-45235: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0437 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 DHCPv6;\n\nCVE-2023-45236: \u041f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u0432\u044b\u0435 \u043d\u043e\u043c\u0435\u0440\u0430 TCP;\n\nCVE-2023-45237: \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b.\nQuarkslab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 CERT-CC \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e Insyde, AMI, Intel \u0438 Phoenix Technologies \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b, \u043d\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0442\u0430\u0442\u0443\u0441 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-30T23:00:00Z", "date_only": false, "value": "2024-01-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-02-06T10:11:18Z", "date_only": false, "value": "2024-02-06T10:11:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/179871", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "212fbcfd-54e4-4068-b33e-885ca289d50b", "content": "https://ift.tt/o0iAm3R\nCVE-2023-45237 | TianoCore EDK2 stable202308 TCP Initial Sequence Number weak prng (GHSA-hc6x-cw6p-gj7h)", "url": "https://t.me/ctinow/179871"}, {"timestamp": "2024-02-14T23:00:00Z", "date_only": false, "value": "2024-02-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-02-26T23:00:00Z", "date_only": false, "value": "2024-02-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-02-27T23:00:00Z", "date_only": false, "value": "2024-02-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2024-03-03T23:00:00Z", "date_only": false, "value": "2024-03-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-03-04T23:00:00Z", "date_only": false, "value": "2024-03-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-03-06T23:00:00Z", "date_only": false, "value": "2024-03-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-03-07T17:06:47.741Z", "date_only": false, "value": "2024-03-07T17:06:47.741Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TianoCore", "record": "CVE-2023-45237", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-03-07T17:15:10.760Z", "date_only": false, "value": "2024-03-07T17:15:10.760", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-45237", "record": "GSD-2023-45237", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-03-10T23:00:00Z", "date_only": false, "value": "2024-03-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2024-03-12T23:00:00Z", "date_only": false, "value": "2024-03-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2024-03-19T23:00:00Z", "date_only": false, "value": "2024-03-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2024-04-03T22:00:00Z", "date_only": false, "value": "2024-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-09T22:00:00Z", "date_only": false, "value": "2024-04-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2024-04-17T22:00:00Z", "date_only": false, "value": "2024-04-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2024-04-24T22:00:00Z", "date_only": false, "value": "2024-04-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2024-04-29T22:00:00Z", "date_only": false, "value": "2024-04-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.16.date"}, {"timestamp": "2024-05-21T22:00:00Z", "date_only": false, "value": "2024-05-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.17.date"}, {"timestamp": "2024-05-30T22:00:00Z", "date_only": false, "value": "2024-05-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.18.date"}, {"timestamp": "2024-05-31T00:00:00Z", "date_only": false, "value": "2024-05-31T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2024-06-02T00:00:00Z", "date_only": false, "value": "2024-06-02T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2024-06-04T22:00:00Z", "date_only": false, "value": "2024-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.19.date"}, {"timestamp": "2024-06-30T07:00:00Z", "date_only": false, "value": "2024-06-30T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-07-09T10:02:47Z", "date_only": false, "value": "2024-07-09T10:02:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-09T10:02:47Z", "date_only": false, "value": "2024-07-09T10:02:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-09T10:02:47Z", "date_only": false, "value": "2024-07-09T10:02:47+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-09T10:02:47Z", "date_only": false, "value": "2024-07-09T10:02:47+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-09T10:02:47Z", "date_only": false, "value": "2024-07-09T10:02:47+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "vulnerabilities.4.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-09T10:02:47Z", "date_only": false, "value": "2024-07-09T10:02:47+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "vulnerabilities.4.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-09T22:00:00Z", "date_only": false, "value": "2024-07-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.20.date"}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2024:4749", "record": "RHSA-2024:4749", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2024:4749", "record": "RHSA-2024:4749", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 RHSA-2024:4749", "record": "RHSA-2024:4749", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2024:4749", "record": "RHSA-2024:4749", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-23T00:00:00Z", "date_only": false, "value": "2024-07-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2024:4749", "record": "ALSA-2024:4749", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-23T16:35:09Z", "date_only": false, "value": "2024-07-23T16:35:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-23T16:35:09Z", "date_only": false, "value": "2024-07-23T16:35:09+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-23T16:35:09Z", "date_only": false, "value": "2024-07-23T16:35:09+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-23T22:00:00Z", "date_only": false, "value": "2024-07-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.21.date"}, {"timestamp": "2024-07-24T22:00:00Z", "date_only": false, "value": "2024-07-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.22.date"}, {"timestamp": "2024-07-25T08:35:23Z", "date_only": false, "value": "2024-07-25T08:35:23Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2024:4749", "record": "ALSA-2024:4749", "field": "modified"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2024:5297", "record": "RHSA-2024:5297", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2024:5297", "record": "RHSA-2024:5297", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 RHSA-2024:5297", "record": "RHSA-2024:5297", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": true, "value": "2024-08-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0679", "record": "CERTFR-2024-AVI-0679", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2024:5297", "record": "RHSA-2024:5297", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-13T00:00:00Z", "date_only": false, "value": "2024-08-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2024:5297", "record": "ALSA-2024:5297", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-13T15:29:44Z", "date_only": false, "value": "2024-08-13T15:29:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-13T15:29:44Z", "date_only": false, "value": "2024-08-13T15:29:44+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-13T15:29:44Z", "date_only": false, "value": "2024-08-13T15:29:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-13T22:00:00Z", "date_only": false, "value": "2024-08-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.23.date"}, {"timestamp": "2024-08-14T00:00:00Z", "date_only": false, "value": "2024-08-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0679", "record": "CERTFR-2024-AVI-0679", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-21T12:03:25Z", "date_only": false, "value": "2024-08-21T12:03:25Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2024:5297", "record": "ALSA-2024:5297", "field": "modified"}, {"timestamp": "2024-09-13T00:00:00Z", "date_only": false, "value": "2024-09-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14336-1", "record": "OPENSUSE-SU-2024:14336-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-13T00:00:00Z", "date_only": false, "value": "2024-09-13T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14336-1", "record": "OPENSUSE-SU-2024:14336-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-13T00:00:00Z", "date_only": false, "value": "2024-09-13T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14336-1", "record": "OPENSUSE-SU-2024:14336-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-09-13T00:00:00Z", "date_only": false, "value": "2024-09-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14336-1", "record": "OPENSUSE-SU-2024:14336-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-09-19T22:00:00Z", "date_only": false, "value": "2024-09-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.24.date"}, {"timestamp": "2024-09-23T22:00:00Z", "date_only": false, "value": "2024-09-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.25.date"}, {"timestamp": "2024-09-24T00:00:00Z", "date_only": false, "value": "2024-09-24T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-10-14T22:00:00Z", "date_only": false, "value": "2024-10-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.26.date"}, {"timestamp": "2024-10-20T22:00:00Z", "date_only": false, "value": "2024-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.27.date"}, {"timestamp": "2024-10-21T22:00:00Z", "date_only": false, "value": "2024-10-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.28.date"}, {"timestamp": "2024-10-24T22:00:00Z", "date_only": false, "value": "2024-10-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.29.date"}, {"timestamp": "2024-10-25T11:07:46Z", "date_only": false, "value": "2024-10-25T11:07:46Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2024-2301", "record": "OESA-2024-2301", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-10T23:00:00Z", "date_only": false, "value": "2024-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.30.date"}, {"timestamp": "2024-11-13T19:58:00.747Z", "date_only": false, "value": "2024-11-13T19:58:00.747301Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-45237", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-13T19:58:00.747Z", "date_only": false, "value": "2024-11-13T19:58:00.747301Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-45237", "record": "FKIE_CVE-2023-45237", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-13T19:58:20.536Z", "date_only": false, "value": "2024-11-13T19:58:20.536Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-45237", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-24T15:53:32Z", "date_only": false, "value": "2024-11-24T15:53:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-24T15:53:32Z", "date_only": false, "value": "2024-11-24T15:53:32+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-24T15:53:32Z", "date_only": false, "value": "2024-11-24T15:53:32+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024_4419", "record": "RHSA-2024_4419", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-24T15:53:46Z", "date_only": false, "value": "2024-11-24T15:53:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-24T15:53:46Z", "date_only": false, "value": "2024-11-24T15:53:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-24T15:53:46Z", "date_only": false, "value": "2024-11-24T15:53:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024_4749", "record": "RHSA-2024_4749", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-24T15:53:59Z", "date_only": false, "value": "2024-11-24T15:53:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-24T15:53:59Z", "date_only": false, "value": "2024-11-24T15:53:59+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-24T15:53:59Z", "date_only": false, "value": "2024-11-24T15:53:59+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024_5297", "record": "RHSA-2024_5297", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-25T23:00:00Z", "date_only": false, "value": "2024-11-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.31.date"}, {"timestamp": "2024-12-19T23:00:00Z", "date_only": false, "value": "2024-12-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.32.date"}, {"timestamp": "2025-02-10T13:56:35Z", "date_only": false, "value": "2025-02-10T13:56:35Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0407-1", "record": "SUSE-SU-2025:0407-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-10T13:56:35Z", "date_only": false, "value": "2025-02-10T13:56:35Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0407-1", "record": "SUSE-SU-2025:0407-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-10T13:56:35Z", "date_only": false, "value": "2025-02-10T13:56:35Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0407-1", "record": "SUSE-SU-2025:0407-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-10T13:56:35Z", "date_only": false, "value": "2025-02-10T13:56:35Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0407-1", "record": "SUSE-SU-2025:0407-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-10T23:00:00Z", "date_only": false, "value": "2025-02-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.33.date"}, {"timestamp": "2025-02-11T10:28:25Z", "date_only": false, "value": "2025-02-11T10:28:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0421-1", "record": "SUSE-SU-2025:0421-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-11T10:28:25Z", "date_only": false, "value": "2025-02-11T10:28:25Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0421-1", "record": "SUSE-SU-2025:0421-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-11T10:28:25Z", "date_only": false, "value": "2025-02-11T10:28:25Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0421-1", "record": "SUSE-SU-2025:0421-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-11T10:28:25Z", "date_only": false, "value": "2025-02-11T10:28:25Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0421-1", "record": "SUSE-SU-2025:0421-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-11T23:00:00Z", "date_only": false, "value": "2025-02-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.34.date"}, {"timestamp": "2025-02-13T10:12:12Z", "date_only": false, "value": "2025-02-13T10:12:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0503-1", "record": "SUSE-SU-2025:0503-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-13T10:12:12Z", "date_only": false, "value": "2025-02-13T10:12:12Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0503-1", "record": "SUSE-SU-2025:0503-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-13T10:12:12Z", "date_only": false, "value": "2025-02-13T10:12:12Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0503-1", "record": "SUSE-SU-2025:0503-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-13T10:12:12Z", "date_only": false, "value": "2025-02-13T10:12:12Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0503-1", "record": "SUSE-SU-2025:0503-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-13T10:12:12Z", "date_only": false, "value": "2025-02-13T10:12:12Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0503-1", "record": "SUSE-SU-2025:0503-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-13T23:00:00Z", "date_only": false, "value": "2025-02-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.35.date"}, {"timestamp": "2025-02-21T10:31:14Z", "date_only": false, "value": "2025-02-21T10:31:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0608-1", "record": "SUSE-SU-2025:0608-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-21T10:31:14Z", "date_only": false, "value": "2025-02-21T10:31:14Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0608-1", "record": "SUSE-SU-2025:0608-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-21T10:31:14Z", "date_only": false, "value": "2025-02-21T10:31:14Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0608-1", "record": "SUSE-SU-2025:0608-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-21T10:31:14Z", "date_only": false, "value": "2025-02-21T10:31:14Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0608-1", "record": "SUSE-SU-2025:0608-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-21T10:33:48Z", "date_only": false, "value": "2025-02-21T10:33:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0609-1", "record": "SUSE-SU-2025:0609-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-21T10:33:48Z", "date_only": false, "value": "2025-02-21T10:33:48Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0609-1", "record": "SUSE-SU-2025:0609-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-21T10:33:48Z", "date_only": false, "value": "2025-02-21T10:33:48Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0609-1", "record": "SUSE-SU-2025:0609-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-21T10:33:48Z", "date_only": false, "value": "2025-02-21T10:33:48Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0609-1", "record": "SUSE-SU-2025:0609-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-23T23:00:00Z", "date_only": false, "value": "2025-02-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.36.date"}, {"timestamp": "2025-02-24T13:06:14Z", "date_only": false, "value": "2025-02-24T13:06:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0690-1", "record": "SUSE-SU-2025:0690-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-24T13:06:14Z", "date_only": false, "value": "2025-02-24T13:06:14Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0690-1", "record": "SUSE-SU-2025:0690-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-24T13:06:14Z", "date_only": false, "value": "2025-02-24T13:06:14Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0690-1", "record": "SUSE-SU-2025:0690-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-02-24T13:06:14Z", "date_only": false, "value": "2025-02-24T13:06:14Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0690-1", "record": "SUSE-SU-2025:0690-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-24T13:06:14Z", "date_only": false, "value": "2025-02-24T13:06:14Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0690-1", "record": "SUSE-SU-2025:0690-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-24T23:00:00Z", "date_only": false, "value": "2025-02-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.37.date"}, {"timestamp": "2025-03-02T23:00:00Z", "date_only": false, "value": "2025-03-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.38.date"}, {"timestamp": "2025-06-05T22:00:00Z", "date_only": false, "value": "2025-06-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.39.date"}, {"timestamp": "2025-06-16T17:12:25.555Z", "date_only": false, "value": "2025-06-16T17:12:25.555701Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2023-45237", "record": "BELL-CVE-2023-45237", "field": "modified"}, {"timestamp": "2025-09-04T22:00:00Z", "date_only": false, "value": "2025-09-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.40.date"}, {"timestamp": "2025-09-08T22:00:00Z", "date_only": false, "value": "2025-09-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.41.date"}, {"timestamp": "2025-11-04T18:17:42.321Z", "date_only": false, "value": "2025-11-04T18:17:42.321Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-45237", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T18:17:42.321Z", "date_only": false, "value": "2025-11-04T18:17:42.321Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-45237", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T21:31:04Z", "date_only": false, "value": "2025-11-04T21:31:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FXQF-P2P3-GXVR", "record": "GHSA-FXQF-P2P3-GXVR", "field": "modified"}, {"timestamp": "2025-11-26T23:00:00Z", "date_only": false, "value": "2025-11-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.42.date"}, {"timestamp": "2025-11-30T23:00:00Z", "date_only": false, "value": "2025-11-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.43.date"}, {"timestamp": "2025-12-04T23:00:00Z", "date_only": false, "value": "2025-12-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.44.date"}, {"timestamp": "2026-01-14T23:00:00Z", "date_only": false, "value": "2026-01-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.45.date"}, {"timestamp": "2026-01-21T23:00:00Z", "date_only": false, "value": "2026-01-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.revision_history.46.date"}, {"timestamp": "2026-01-21T23:00:00Z", "date_only": false, "value": "2026-01-21T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-22T08:54:11.415Z", "date_only": false, "value": "2026-01-22T08:54:11.415+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0126", "record": "WID-SEC-W-2024-0126", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-29T00:30:00Z", "date_only": false, "value": "2026-01-29T00:30:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_abb \u00b7 SA24P003", "record": "SA24P003", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-29T00:30:00Z", "date_only": false, "value": "2026-01-29T00:30:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-141-02", "record": "ICSA-26-141-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-29T00:30:00Z", "date_only": false, "value": "2026-01-29T00:30:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_abb \u00b7 SA24P003", "record": "SA24P003", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-29T00:30:00Z", "date_only": false, "value": "2026-01-29T00:30:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-141-02", "record": "ICSA-26-141-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-18T03:08:05Z", "date_only": false, "value": "2026-02-18T03:08:05.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-02-18T03:08:05Z", "date_only": false, "value": "2026-02-18T03:08:05.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-18T10:32:28.527Z", "date_only": false, "value": "2026-02-18T10:32:28.527Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-14T00:30:00Z", "date_only": false, "value": "2026-05-14T00:30:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_abb \u00b7 SA24P003", "record": "SA24P003", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-05-14T00:30:00Z", "date_only": false, "value": "2026-05-14T00:30:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_abb \u00b7 SA24P003", "record": "SA24P003", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-14T06:18:31.245Z", "date_only": false, "value": "2026-05-14T06:18:31.245Z", "kind": "other", "label": "Document generated", "source": "csaf_abb \u00b7 SA24P003", "record": "SA24P003", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-19T15:18:28.047Z", "date_only": false, "value": "2026-05-19T15:18:28.047733Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-141-02", "record": "ICSA-26-141-02", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-21T05:00:00Z", "date_only": false, "value": "2026-05-21T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-02", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "fe5d9382-8292-4270-ba09-c5f241444cdd", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-02"}, {"timestamp": "2026-05-21T06:00:00Z", "date_only": false, "value": "2026-05-21T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-141-02", "record": "ICSA-26-141-02", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-05-21T06:00:00Z", "date_only": false, "value": "2026-05-21T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-141-02", "record": "ICSA-26-141-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T06:28:30.600Z", "date_only": false, "value": "2026-06-17T06:28:30.600", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-45237", "record": "FKIE_CVE-2023-45237", "field": "lastModified"}, {"timestamp": "2026-06-26T09:30:14Z", "date_only": false, "value": "2026-06-26T09:30:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-26T09:30:14Z", "date_only": false, "value": "2026-06-26T09:30:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-26T09:30:14Z", "date_only": false, "value": "2026-06-26T09:30:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-12T22:00:13.057Z", "date_only": false, "value": "2026-07-12T22:00:13.057816Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/794", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "84ca5bd9-a67d-4d12-bbdf-6bf8a151403f", "content": "\ud83e\uddda\ud83c\udffd\u200d\u2642\ufe0f\u00a0 PixieFail\u00a0: when booting over the network allows to take over billions of systems.\n\nYet another story of vulnerabilities in UEFI: supply chain vulnerabilities are not dead.\n\u00a0\nA few weeks ago, our friends at BINARLY\ud83d\udd2c \n disclosed LogoFail. When a tampered image is used during the boot of almost any computer, it could break the root of trust and take total control over the system. \n\nLet us introduce PixieFail which does the same using network booting. \n\n\ud83d\udc7e UEFI is a complex software handling (too) many features. And vulnerabilities in UEFI have high impact:\n\ud835\udfcf They might likely break the root of trust. \n\ud835\udfd0 They affect billions of devices. \n\nInstalling and configuring the operating system on tens of thousands of servers is extremely onerous without any form of automation. \n\nNetwork boot is a standard feature on enterprise computers and servers. Using network boot to load an OS image from the network at boot time is popular in data centers and high-performance computing (HPC) environments.\n\nThey all need to be provisioned with the same operating system and software configuration. Downloading and running the OS from a central set of servers (Boot servers) greatly simplifies management. \n\nUEFI allows to do that using a feature called PXE boot, also known as \u201cPixie boot\u201d.\n\n\ud83d\udca5 But what happens if there is an exploitable vulnerability during the process?\n\n\ud83d\udca5 \ud83d\udca5 And what if such vulnerability is present in the reference code that almost all vendors use in their systems?\n\nLast year, Quarkslab security researchers found 9\ufe0f\u20e3 of those vulnerabilities!\n\nThey were found in the networking stack of EDK II, an open source implementation of the UEFI specification, used by nearly all vendors of server and desktop systems. \n\nFinding such flaws in a critical piece of the firmware supply chain of billions of devices shows that we are still far away from achieving the level of trustworthiness of our computing infrastructure needed in modern times.\n\n\ud83d\ude25 Reporting and coordinating the timely release of fixes for such bugs is also a difficult (free) task. Thanks to the CERT-FR and CERT/CC to report them to all affected vendors and get them fixed.\n\nThe collection: CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, CVE-2023-45237.\n\n\ud83d\udcd6 Want to know more about PixieFail? Follow the white rabbit: https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html", "url": "https://t.me/securixy_kz/794"}, {"timestamp": "2026-07-14T00:00:56.520Z", "date_only": false, "value": "2026-07-14T00:00:56.520964Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/794", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "59722d0d-5ff3-4d63-bcfd-9bae23ce4779", "content": "\ud83e\uddda\ud83c\udffd\u200d\u2642\ufe0f\u00a0 PixieFail\u00a0: when booting over the network allows to take over billions of systems.\n\nYet another story of vulnerabilities in UEFI: supply chain vulnerabilities are not dead.\n\u00a0\nA few weeks ago, our friends at BINARLY\ud83d\udd2c \n disclosed LogoFail. When a tampered image is used during the boot of almost any computer, it could break the root of trust and take total control over the system. \n\nLet us introduce PixieFail which does the same using network booting. \n\n\ud83d\udc7e UEFI is a complex software handling (too) many features. And vulnerabilities in UEFI have high impact:\n\ud835\udfcf They might likely break the root of trust. \n\ud835\udfd0 They affect billions of devices. \n\nInstalling and configuring the operating system on tens of thousands of servers is extremely onerous without any form of automation. \n\nNetwork boot is a standard feature on enterprise computers and servers. Using network boot to load an OS image from the network at boot time is popular in data centers and high-performance computing (HPC) environments.\n\nThey all need to be provisioned with the same operating system and software configuration. Downloading and running the OS from a central set of servers (Boot servers) greatly simplifies management. \n\nUEFI allows to do that using a feature called PXE boot, also known as \u201cPixie boot\u201d.\n\n\ud83d\udca5 But what happens if there is an exploitable vulnerability during the process?\n\n\ud83d\udca5 \ud83d\udca5 And what if such vulnerability is present in the reference code that almost all vendors use in their systems?\n\nLast year, Quarkslab security researchers found 9\ufe0f\u20e3 of those vulnerabilities!\n\nThey were found in the networking stack of EDK II, an open source implementation of the UEFI specification, used by nearly all vendors of server and desktop systems. \n\nFinding such flaws in a critical piece of the firmware supply chain of billions of devices shows that we are still far away from achieving the level of trustworthiness of our computing infrastructure needed in modern times.\n\n\ud83d\ude25 Reporting and coordinating the timely release of fixes for such bugs is also a difficult (free) task. Thanks to the CERT-FR and CERT/CC to report them to all affected vendors and get them fixed.\n\nThe collection: CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, CVE-2023-45237.\n\n\ud83d\udcd6 Want to know more about PixieFail? Follow the white rabbit: https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html", "url": "https://t.me/securixy_kz/794", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:14.761Z", "date_only": false, "value": "2026-07-26T02:02:14.761605Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2373", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "8575db2f-e804-4ca1-a52a-4fd914c736ed", "content": "PixieFail: \u0434\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 IPv6 EDK II Tianocore\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Quarkslab \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 EDK II, \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 UEFI \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432\u0441\u0435\u0445 \u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0434\u0430\u043d\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 PixieFail, \u0438 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u0442\u044c \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0439 \u0433\u043e\u043b\u043e\u0432\u043d\u043e\u0439 \u0431\u043e\u043b\u044c\u044e \u0434\u043b\u044f \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 PixieFail \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0442\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b, \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0434\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u041e\u0421, \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 UEFI \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a. \u0422\u0430\u043a\u0438\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u044b \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u0430\u0439\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f TianoCore EDK II \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043a\u0430\u043a Arm, Insyde, AMI, Phoenix Technologies \u0438 Microsoft. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 TianoCore EDK II \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 IPv6, \u043f\u0440\u0435\u0435\u043c\u043d\u0438\u043a\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPv4. \u0418\u0445 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 (Preboot Execution Environment, PXE), \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 IPv6. \n\n\u0414\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PixieFail \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442:\n\n- CVE-2023-45229 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5): \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0435\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438.\n\n- CVE-2023-45230 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,3): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 DHCPv6, \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438. \u041e\u0448\u0438\u0431\u043a\u0443 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0432\u044b\u0431\u0440\u0430\u0432 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0434\u043b\u0438\u043d\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0432 PXE \u043e\u0431\u043c\u0435\u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c.\n\n- CVE-2023-45231 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5): \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0438. \n\n- CVE-2023-45232 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5): \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \n\n- CVE-2023-45233 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5): \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 PadN \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \n\n- CVE-2023-45234 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,3): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 Advertise-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6. \n\n- CVE-2023-45235 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,3): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0437 Advertise-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 DHCPv6.\n\n- CVE-2023-45236 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,7): \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u0432\u044b\u0435 \u043d\u043e\u043c\u0435\u0440\u0430 TCP.\n\n- CVE-2023-45237 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,3): \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #UEFI", "url": "https://t.me/EchelonEyes/2373"}, {"timestamp": "2026-07-28T00:00:34.981Z", "date_only": false, "value": "2026-07-28T00:00:34.981263Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/2373", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "2e0dc46c-8f5b-4b22-a5ce-30b840d1102a", "content": "PixieFail: \u0434\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 IPv6 EDK II Tianocore\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Quarkslab \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 EDK II, \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 UEFI \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432\u0441\u0435\u0445 \u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0434\u0430\u043d\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 PixieFail, \u0438 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u0442\u044c \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0439 \u0433\u043e\u043b\u043e\u0432\u043d\u043e\u0439 \u0431\u043e\u043b\u044c\u044e \u0434\u043b\u044f \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 PixieFail \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0442\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b, \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0434\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u041e\u0421, \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 UEFI \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a. \u0422\u0430\u043a\u0438\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u044b \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u0430\u0439\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f TianoCore EDK II \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043a\u0430\u043a Arm, Insyde, AMI, Phoenix Technologies \u0438 Microsoft. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 TianoCore EDK II \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 IPv6, \u043f\u0440\u0435\u0435\u043c\u043d\u0438\u043a\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPv4. \u0418\u0445 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 (Preboot Execution Environment, PXE), \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 IPv6. \n\n\u0414\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PixieFail \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442:\n\n- CVE-2023-45229 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5): \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0435\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438.\n\n- CVE-2023-45230 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,3): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 DHCPv6, \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438. \u041e\u0448\u0438\u0431\u043a\u0443 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0432\u044b\u0431\u0440\u0430\u0432 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0434\u043b\u0438\u043d\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0432 PXE \u043e\u0431\u043c\u0435\u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c.\n\n- CVE-2023-45231 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5): \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0438. \n\n- CVE-2023-45232 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5): \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \n\n- CVE-2023-45233 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5): \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 PadN \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \n\n- CVE-2023-45234 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,3): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 Advertise-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6. \n\n- CVE-2023-45235 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,3): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0437 Advertise-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 DHCPv6.\n\n- CVE-2023-45236 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,7): \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u0432\u044b\u0435 \u043d\u043e\u043c\u0435\u0440\u0430 TCP.\n\n- CVE-2023-45237 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,3): \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #UEFI", "url": "https://t.me/EchelonEyes/2373", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-06T11:07:46Z", "date_only": false, "value": "2026-08-06T11:07:46Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2024-2301", "record": "OESA-2024-2301", "field": "modified"}, {"timestamp": "2026-09-20T11:41:24Z", "date_only": false, "value": "2026-09-20T11:41:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2024:4749", "record": "RHSA-2024:4749", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:41:46Z", "date_only": false, "value": "2026-09-20T11:41:46Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2024:5297", "record": "RHSA-2024:5297", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:41:46Z", "date_only": false, "value": "2026-09-20T11:41:46Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2024:5297", "record": "RHSA-2024:5297", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T17:54:01Z", "date_only": false, "value": "2026-09-20T17:54:01Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0407-1", "record": "SUSE-SU-2025:0407-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:54:01Z", "date_only": false, "value": "2026-09-20T17:54:01Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0407-1", "record": "SUSE-SU-2025:0407-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T17:54:06Z", "date_only": false, "value": "2026-09-20T17:54:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0421-1", "record": "SUSE-SU-2025:0421-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:54:06Z", "date_only": false, "value": "2026-09-20T17:54:06Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0421-1", "record": "SUSE-SU-2025:0421-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T17:56:02Z", "date_only": false, "value": "2026-09-20T17:56:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0608-1", "record": "SUSE-SU-2025:0608-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:56:02Z", "date_only": false, "value": "2026-09-20T17:56:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0608-1", "record": "SUSE-SU-2025:0608-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T17:56:03Z", "date_only": false, "value": "2026-09-20T17:56:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0609-1", "record": "SUSE-SU-2025:0609-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:56:03Z", "date_only": false, "value": "2026-09-20T17:56:03Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0609-1", "record": "SUSE-SU-2025:0609-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:18:03Z", "date_only": false, "value": "2026-09-20T21:18:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14336-1", "record": "OPENSUSE-SU-2024:14336-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:18:03Z", "date_only": false, "value": "2026-09-20T21:18:03Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14336-1", "record": "OPENSUSE-SU-2024:14336-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-05T16:01:20Z", "date_only": false, "value": "2026-10-05T16:01:20Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-45237", "record": "UBUNTU-CVE-2023-45237", "field": "modified"}, {"timestamp": "2026-10-11T11:32:37Z", "date_only": false, "value": "2026-10-11T11:32:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2024:4749", "record": "RHSA-2024:4749", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:32:37Z", "date_only": false, "value": "2026-10-11T11:32:37Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2024:4749", "record": "RHSA-2024:4749", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-30T20:09:05.348Z", "anchors": {"origin": {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-01-01T08:00:00Z", "date_only": false, "value": "2024-01-01T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-01-17T15:31:55Z", "date_only": false, "value": "2024-01-17T15:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/3985", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "552cc7e6-a002-4cac-b6f0-0d304044834e", "content": "\u200b\u26a1\ufe0fPixieFAIL: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 UEFI\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Quarkslab \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Tianocore EDK II, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 UEFI, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n9 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043e\u0431\u0449\u0435\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 PixieFAIL, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u044d\u0448\u0430 DNS \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439. \u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0441\u043c\u043e\u0442\u0440\u0430 NetworkPkg, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Microsoft, ARM, Insyde, Phoenix Technologies \u0438 AMI. \u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 Quarkslab \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u0438 Tianocore EDK II \u043e\u0442 Microsoft \u2014 Project Mu.\n\n\u0414\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043f\u043e\u0434 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE:\n\nCVE-2023-45229: \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0446\u0438\u0439 IANA/IATA \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6 Advertise;\n\nCVE-2023-45230: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 DHCPv6 \u0438\u0437-\u0437\u0430 \u0434\u043b\u0438\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 Server ID;\n\nCVE-2023-45231: \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0443\u0441\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 ND Redirect;\n\nCVE-2023-45232: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45233: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043e\u043f\u0446\u0438\u0438 PadN \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45234: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6;\n\nCVE-2023-45235: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0437 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 DHCPv6;\n\nCVE-2023-45236: \u041f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u0432\u044b\u0435 \u043d\u043e\u043c\u0435\u0440\u0430 TCP;\n\nCVE-2023-45237: \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b.\nQuarkslab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 CERT-CC \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e Insyde, AMI, Intel \u0438 Phoenix Technologies \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b, \u043d\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0442\u0430\u0442\u0443\u0441 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1409515.0, "hours": 391.53194444444443, "days": 16.313831018518517, "min_seconds": 1409515.0, "max_seconds": 1409515.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-01T08:00:00Z", "date_only": false, "value": "2024-01-01T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-01-17T15:31:55Z", "date_only": false, "value": "2024-01-17T15:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/3985", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "552cc7e6-a002-4cac-b6f0-0d304044834e", "content": "\u200b\u26a1\ufe0fPixieFAIL: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 UEFI\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Quarkslab \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Tianocore EDK II, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 UEFI, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n9 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043e\u0431\u0449\u0435\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 PixieFAIL, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u044d\u0448\u0430 DNS \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439. \u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0441\u043c\u043e\u0442\u0440\u0430 NetworkPkg, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Microsoft, ARM, Insyde, Phoenix Technologies \u0438 AMI. \u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 Quarkslab \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u0438 Tianocore EDK II \u043e\u0442 Microsoft \u2014 Project Mu.\n\n\u0414\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043f\u043e\u0434 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE:\n\nCVE-2023-45229: \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0446\u0438\u0439 IANA/IATA \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6 Advertise;\n\nCVE-2023-45230: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 DHCPv6 \u0438\u0437-\u0437\u0430 \u0434\u043b\u0438\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 Server ID;\n\nCVE-2023-45231: \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0443\u0441\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 ND Redirect;\n\nCVE-2023-45232: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45233: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043e\u043f\u0446\u0438\u0438 PadN \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45234: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6;\n\nCVE-2023-45235: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0437 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 DHCPv6;\n\nCVE-2023-45236: \u041f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u0432\u044b\u0435 \u043d\u043e\u043c\u0435\u0440\u0430 TCP;\n\nCVE-2023-45237: \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b.\nQuarkslab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 CERT-CC \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e Insyde, AMI, Intel \u0438 Phoenix Technologies \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b, \u043d\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0442\u0430\u0442\u0443\u0441 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 7171200.0, "hours": 1992.0, "days": 83.0, "min_seconds": 7084800.0, "max_seconds": 7257600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 8438400.0, "hours": 2344.0, "days": 97.66666666666667, "min_seconds": 8438400.0, "max_seconds": 8524800.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-01T08:00:00Z", "date_only": false, "value": "2024-01-01T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 7171200.0, "hours": 1992.0, "days": 83.0, "min_seconds": 7084800.0, "max_seconds": 7257600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:4419", "record": "RHSA-2024:4419", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 7028885.0, "hours": 1952.4680555555556, "days": 81.35283564814814, "min_seconds": 7028885.0, "max_seconds": 7115285.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-17T15:31:55Z", "date_only": false, "value": "2024-01-17T15:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/3985", "record": "CVE-2023-45237", "field": "creation_timestamp", "uuid": "552cc7e6-a002-4cac-b6f0-0d304044834e", "content": "\u200b\u26a1\ufe0fPixieFAIL: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 UEFI\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Quarkslab \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Tianocore EDK II, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 UEFI, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n9 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043e\u0431\u0449\u0435\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 PixieFAIL, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u044d\u0448\u0430 DNS \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439. \u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0441\u043c\u043e\u0442\u0440\u0430 NetworkPkg, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Microsoft, ARM, Insyde, Phoenix Technologies \u0438 AMI. \u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 Quarkslab \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u0438 Tianocore EDK II \u043e\u0442 Microsoft \u2014 Project Mu.\n\n\u0414\u0435\u0432\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043f\u043e\u0434 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE:\n\nCVE-2023-45229: \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0446\u0438\u0439 IANA/IATA \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6 Advertise;\n\nCVE-2023-45230: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 DHCPv6 \u0438\u0437-\u0437\u0430 \u0434\u043b\u0438\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 Server ID;\n\nCVE-2023-45231: \u0447\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0443\u0441\u0435\u0447\u0451\u043d\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 ND Redirect;\n\nCVE-2023-45232: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45233: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043e\u043f\u0446\u0438\u0438 PadN \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Destination Options;\n\nCVE-2023-45234: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 DHCPv6;\n\nCVE-2023-45235: \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0437 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 DHCPv6;\n\nCVE-2023-45236: \u041f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u0432\u044b\u0435 \u043d\u043e\u043c\u0435\u0440\u0430 TCP;\n\nCVE-2023-45237: \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b.\nQuarkslab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 CERT-CC \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e Insyde, AMI, Intel \u0438 Phoenix Technologies \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b, \u043d\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0442\u0430\u0442\u0443\u0441 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-45237", "record": "MSRC_CVE-2023-45237", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}