Wind River Support Network

HomeDefectsLIN1022-6463

Fixed

LIN1022-6463 : Security Advisory - ovmf - CVE-2023-45232

Created: Feb 6, 2024 Updated: Jul 2, 2024

Resolved Date: Jun 30, 2024

Found In Version: 10.22.33.1

Fix Version: 10.22.33.17

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

 EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Availability.



CREATE(Triage):(User=admin) CVE-2023-45232 (https://nvd.nist.gov/vuln/detail/CVE-2023-45232)

CVEs

CVE-2023-45232