Wind River Support Network

HomeDefectsLIN1021-7201

Fixed

LIN1021-7201 : Security Advisory - ovmf - CVE-2023-45232

Created: Feb 6, 2024 Updated: Oct 16, 2024

Resolved Date: Oct 14, 2024

Found In Version: 10.21.20.1

Fix Version: 10.21.20.24

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

 EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Availability.



CREATE(Triage):(User=admin) CVE-2023-45232 (https://nvd.nist.gov/vuln/detail/CVE-2023-45232)

CVEs

CVE-2023-45232