Wind River Support Network

HomeDefectsLIN1019-10912
Fixed

LIN1019-10912 : Security Advisory - ovmf - CVE-2023-45232

Created: Feb 6, 2024    Updated: Dec 11, 2024
Resolved Date: Sep 18, 2024
Found In Version: 10.19.45.1
Fix Version: 10.19.45.32
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

 EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Availability.



CREATE(Triage):(User=admin) CVE-2023-45232 (https://nvd.nist.gov/vuln/detail/CVE-2023-45232)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube