Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

SUSE: OVMF Important Security Update for CVE-2023-45229, 45230

suse
Calendar Grey January 15, 2026
Dist Suse Esm H88
Update for ovmf addresses two important vulnerabilities, improving system security and reliability for SUSE Linux users.
An update that solves two vulnerabilities can now be installed.

Summary

## This update for ovmf fixes the following issues: * CVE-2023-45229: integer underflow and out-of-bounds read when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (bsc#1218879). * CVE-2023-45230: out-of-bounds write in the DHCPv6 client through a long Server ID option (bsc#1218880). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-544=1 ## Package List: * SUSE Linux Micro 6.0 (noarch) * qemu-uefi-aarch64-202305-2.1 * qemu-ovmf-x86_64-202305-2.1

Topics%20covered

Topics Covered

security advisory SuSE important out-of-bounds integer underflow ovmf

References

* bsc#1218879

* bsc#1218880

Cross-

* CVE-2023-45229

* CVE-2023-45230

CVSS scores:

* CVE-2023-45229 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2023-45229 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2023-45229 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2023-45230 ( SUSE ): 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

* CVE-2023-45230 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2023-45230 ( NVD ): 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Affected Products:

* SUSE Linux Micro 6.0

An update that solves two vulnerabilities can now be installed.

##

* https://www.suse.com/security/cve/CVE-2023-45229.html

* https://www.suse.com/security/cve/CVE-2023-45230.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:20037-1
Release Date: 2025-12-30T20:26:33Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important out-of-bounds integer underflow ovmf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.