Lucene search

IntelCVELIST:CVE-2023-23580

HistoryMay 10, 2023 - 1:16 p.m.

CVE-2023-23580

2023-05-1013:16:42

CWE-121

intel

www.cve.org

cve-2023-23580

buffer overflow

intel trace analyzer

privilege escalation

local access

4.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

15.9%

JSON

Stack-based buffer overflow for some Intel® Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Trace Analyzer and Collector software",
    "versions": [
      {
        "version": "before version 2021.8.0 published Dec 2022",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html