Multiple security vulnerabilities have been disclosed in the TCP/IP network protocol stack of an open-source reference implementation of the Unified Extensible Firmware Interface (
UEFI) specification used widely in modern computers.
Collectively dubbed
PixieFail by Quarkslab, the
nine issues reside in the TianoCore EFI Development Kit II (
EDK II) and could be exploited to achieve remote code execution, denial-of-service (DoS), DNS cache poisoning, and leakage of sensitive information.
