Wind River Support Network

HomeDefectsLIN1023-3610

Fixed

LIN1023-3610 : Security Advisory - ovmf - CVE-2023-45232

Created: Feb 6, 2024 Updated: Sep 15, 2024

Resolved Date: Aug 11, 2024

Found In Version: 10.23.30.1

Fix Version: 10.23.30.13

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

 EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Availability.



CREATE(Triage):(User=admin) CVE-2023-45232 (https://nvd.nist.gov/vuln/detail/CVE-2023-45232)

CVEs

CVE-2023-45232