CVE-2023-45233

CVE-2023-45233 describes an infinite loop vulnerability within EDK2's Network Package, specifically when parsing IPv6 Destination Options headers containing a PadN option. This flaw primarily affects Tianocore EDK II and can be exploited remotely to cause a denial of service, leading to a loss of availability. Rated with a CVSS score of 7.5 (High), it requires no user interaction or privileges, making it easily exploitable. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.