VULNERABILITY INTELLIGENCE

CVE-2023-45232

CVSS score7.5 HIGH
EPSS probability2.08%
CISA KEVNot currently listed
Published2024-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

Weakness classification

  • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Primary references