E
DK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.
References
Configurations
History
04 Nov 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Nov 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability. |
21 Nov 2024, 08:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html - Third Party Advisory, VDB Entry | |
| References | () http://www.openwall.com/lists/oss-security/2024/01/16/2 - Mailing List | |
| References | () https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h - Vendor Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/[email protected]/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/ - | |
| References | () https://security.netapp.com/advisory/ntap-20240307-0011/ - |
Information
Published : 2024-01-16 16:15
Updated : 2025-11-04 19:16
NVD link : CVE-2023-45232
Mitre link : CVE-2023-45232
CVE.ORG link : CVE-2023-45232
JSON object : View
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')