Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-45232
HistoryJan 16, 2024 - 4:15 p.m.

Design/Logic Flaw

2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
7
design flaw
logic flaw
edk2
network package
infinite loop
vulnerability
ipv6
destination options
unauthorized access
availability loss
nvd

7.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.4%

EDK2’s Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Availability.

CPENameOperatorVersion
edk2le202311