p PatchFirst

CVE-2023-45233

CVE-2023-45233 · Infinite loop in EDK II Network Package

This page contains facts from public vulnerability sources. Check the original advisory before updating.

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

CVSS 7.5 · High · EPSS 2.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • edk2

    Versions
    • edk2-stable202308: Affected

    No fix published

  • edk2 Debian:12

    Versions
    • 2022.11-6
    Affected ranges
    • ECOSYSTEM: < 2022.11-6+deb12u1

    Update to 2022.11-6+deb12u1

  • edk2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2023.11-6

    Update to 2023.11-6

  • edk2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2023.11-6

    Update to 2023.11-6

  • edk2 Ubuntu:Pro:16.04:LTS

    Versions
    • 0~20150106.5c2d456b-2
    • 0~20160104.c2a892d7-1
    • 0~20160408.ffea0a2c-2
    • 0~20160408.ffea0a2c-2ubuntu0.1
    • 0~20160408.ffea0a2c-2ubuntu0.2
    • 0~20160408.ffea0a2c-2ubuntu0.2+esm1
    • 0~20160408.ffea0a2c-2ubuntu0.2+esm3
    • 0~20160408.ffea0a2c-2ubuntu0.2+esm4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • edk2 Ubuntu:Pro:18.04:LTS

    Versions
    • 0~20170911.5dfba97c-1
    • 0~20171010.234dbcef-1
    • 0~20171027.76fd5a66-1
    • 0~20171205.a9212288-1
    • 0~20180105.0bc94c74-1
    • 0~20180205.c0d9813c-1
    • 0~20180205.c0d9813c-2
    • 0~20180205.c0d9813c-2ubuntu0.1
    • 0~20180205.c0d9813c-2ubuntu0.2
    • 0~20180205.c0d9813c-2ubuntu0.3
    • 0~20180205.c0d9813c-2ubuntu0.3+esm1
    • 0~20180205.c0d9813c-2ubuntu0.3+esm2
    • 0~20180205.c0d9813c-2ubuntu0.3+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • edk2 Ubuntu:20.04:LTS

    Versions
    • 0~20190606.20d2e5a1-2ubuntu1
    • 0~20190828.37eef910-3
    • 0~20190828.37eef910-4
    • 0~20191122.bd85bf54-1
    • 0~20191122.bd85bf54-1ubuntu1
    • 0~20191122.bd85bf54-2
    • 0~20191122.bd85bf54-2ubuntu1
    • 0~20191122.bd85bf54-2ubuntu2
    • 0~20191122.bd85bf54-2ubuntu3
    • 0~20191122.bd85bf54-2ubuntu3.1
    • 0~20191122.bd85bf54-2ubuntu3.2
    • 0~20191122.bd85bf54-2ubuntu3.3
    • 0~20191122.bd85bf54-2ubuntu3.4
    Affected ranges
    • ECOSYSTEM: < 0~20191122.bd85bf54-2ubuntu3.5

    Update to 0~20191122.bd85bf54-2ubuntu3.5

  • edk2 Ubuntu:22.04:LTS

    Versions
    • 2021.08~rc0-2
    • 2021.08-3
    • 2021.11~rc1-1
    • 2021.11-1
    • 2021.11-2
    • 2022.02~rc1-1
    • 2022.02~rc1-1ubuntu1
    • 2022.02-1
    • 2022.02-2
    • 2022.02-3
    • 2022.02-3ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: < 2022.02-3ubuntu0.22.04.2

    Update to 2022.02-3ubuntu0.22.04.2

Original sources

Check your server →