EDK2s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.
Weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Edk2 | Tianocore | * | 202311 (including) |
| Red Hat Enterprise Linux 8 | RedHat | edk2-0:20220126gitbb1bba3d77-13.el8_10 | * |
| Red Hat Enterprise Linux 8.8 Extended Update Support | RedHat | edk2-0:20220126gitbb1bba3d77-4.el8_8.6 | * |
| Red Hat Enterprise Linux 9 | RedHat | edk2-0:20231122-6.el9 | * |
| Edk2 | Ubuntu | bionic | * |
| Edk2 | Ubuntu | esm-infra/focal | * |
| Edk2 | Ubuntu | focal | * |
| Edk2 | Ubuntu | jammy | * |
| Edk2 | Ubuntu | lunar | * |
| Edk2 | Ubuntu | mantic | * |
| Edk2 | Ubuntu | trusty | * |
| Edk2 | Ubuntu | xenial | * |
References
- http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html
- http://www.openwall.com/lists/oss-security/2024/01/16/2
- https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/
- https://security.netapp.com/advisory/ntap-20240307-0011/
- http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html
- http://www.openwall.com/lists/oss-security/2024/01/16/2
- https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
- https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/
- https://security.netapp.com/advisory/ntap-20240307-0011/
- https://www.kb.cert.org/vuls/id/132380