Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-45233
HistoryJan 16, 2024 - 4:15 p.m.

Design/Logic Flaw

2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
10
edk2
network package
ipv6
padn option
unauthorized access
availability loss
vulnerability

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%

EDK2’s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Availability.

CPENameOperatorVersion
edk2le202311