vulnerability
Ubuntu: USN-6638-1 (CVE-2023-45232): EDK II vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Jan 16, 2024 | Feb 15, 2024 | Mar 27, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jan 16, 2024
Added
Feb 15, 2024
Modified
Mar 27, 2026
Description
EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Availability.
Solutions
ubuntu-upgrade-efi-shell-aa64ubuntu-upgrade-efi-shell-armubuntu-upgrade-efi-shell-x64ubuntu-upgrade-ovmfubuntu-upgrade-qemu-efiubuntu-upgrade-qemu-efi-aarch64ubuntu-upgrade-qemu-efi-arm
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.