CVE-2023-45232

Name of the Vulnerable Software and Affected Versions EDK2 (affected versions not specified)

Description The issue is related to an infinite loop vulnerability in EDK2's Network Package when parsing unknown options in the Destination Options header of IPv6. This can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability. The vulnerability is also associated with a buffer overflow in the IPv6 Options Header Handler component of the Tianocore EDK2 library, which can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.