#pxe

0 stories this week · 8 this month · 9 in 6 months · mostly security

Stories per day · 30 days

9 stories, newest first · one card per story

The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.

7 min readedk-ii uefi

A 16-year-old PXE ICMP buffer overflow, rated 9.5, was disclosed early after AMI published a fix.

8 min readedk-ii uefi

An attacker on the network can execute code during IPv4 or IPv6 PXE boot via ICMP error messages, affecting UEFI firmware on many servers.

CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.

6 min readuefi edk-ii

An unauthenticated ICMP sender can overflow a 504-byte field during PXE boot; AMI’s fix surfaced early and affected devices remain unclear.

4 min readedk-ii uefi

GBHackers14d agohigh

Oversized ICMP errors can corrupt firmware memory only while a machine is PXE-booting; TianoCore merged a fix on October 15.

3 min readuefi edk-ii

One ICMP error during network boot can crash the client or, on a known build, run code before Secure Boot; vendor updates are still pending.

4 min readuefi edk-ii

A 16-year-old buffer overflow in the PXE ICMP parser scores 9.5; an early AMI patch made the bug public before the planned January disclosure.

8 min readuefi edk2

Microsoft will deprecate Windows Deployment Services starting with the Windows Server release after 2025.

Stories tagged #pxe