Edk2 · Edk2 · CVE-2023-45233
**Name of the Vulnerable Software and Affected Versions**
EDK2 (affected versions not specified)
**Description**
The issue is related to an infinite loop vulnerability in EDK2's Network Package when parsing a PadN option in the Destination Options header of IPv6. This can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability. The vulnerability is associated with the function `Ip6IsOptionValid()` and the processing of the `PadN` parameter.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.