Infinite loop in EDK II Network Package
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-835.
Summary
EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
Red Hat 3 advisories
- RHSA-2024:8104 Released 2024-10-15 · Red Hat rating Moderateedk2 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) edk2-20220126gitbb1bba3d77-4.el8_8.6, edk2-aarch64-20220126gitbb1bba3d77-4.el8_8.6, edk2-ovmf-20220126gitbb1bba3d77-4.el8_8.6
- RHSA-2024:3017 Released 2024-05-22 · Red Hat rating Importantedk2 security update
- Red Hat Enterprise Linux AppStream (v. 8) edk2-20220126gitbb1bba3d77-13.el8_10, edk2-aarch64-20220126gitbb1bba3d77-13.el8_10, edk2-ovmf-20220126gitbb1bba3d77-13.el8_10
- RHSA-2024:2264 Released 2024-04-30 · Red Hat rating Importantedk2 security update
- Red Hat Enterprise Linux AppStream (v. 9) edk2-20231122-6.el9, edk2-aarch64-20231122-6.el9, edk2-ovmf-20231122-6.el9
- Red Hat Enterprise Linux CRB (v. 9) edk2-aarch64-20231122-6.el9, edk2-ovmf-20231122-6.el9, edk2-tools-20231122-6.el9 +1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
TianoCore edk2 — github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6…
5 records Highest priority Priority HIGH 1 HIGH, 3 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2023-24238 Infinite loop in EDK II Network PackagePriority HIGH 74
- TI-2023-24236 Out-of-Bounds Read in EDK II Network PackagePriority MEDIUM 62
- TI-2023-24239 Buffer Overflow in EDK II Network PackagePriority MEDIUM 40
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:3017 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:2264 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2024:8104 |
| Red Hat Enterprise Linux CRB (v. 9) | Fixed | RHSA-2024:2264 |
Timeline
- 2026-10-02 Threatist record created from CVE-2023-45232
- 2026-10-03 Alias added: GHSA-3r3p-444m-2g4p
References
Advisory 2
More TianoCore Edk2 vulnerabilities
- TI-2026-79288 Out-of-bounds write in Google Brotli decoder KEVCVSS 4.0CRITICAL 9.2
- TI-2023-24240 Buffer Overflow in EDK II Network Package CVSS 3.1HIGH 8.8
- TI-2023-24238 Infinite loop in EDK II Network Package CVSS 3.1HIGH 7.5
- TI-2023-24235 Buffer Overflow in EDK II Network Package CVSS 3.1HIGH 8.8
- TI-2023-26565 An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. CVSS 3.1MEDIUM 6.7
- TI-2023-24236 Out-of-Bounds Read in EDK II Network Package CVSS 3.1MEDIUM 6.5
Sources
- CVE-2023-45232 · CVE Program
- CVE-2023-45232 · NVD
- FIRST EPSS
- GHSA-3r3p-444m-2g4p · GitHub Advisory Database · CC BY 4.0
- CVE-2023-45232 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences