Lucene search

IntelCVELIST:CVE-2023-23910

HistoryMay 10, 2023 - 1:16 p.m.

CVE-2023-23910

2023-05-1013:16:42

CWE-787

intel

www.cve.org

intel trace analyzer

out-of-bounds write

escalation of privilege

local access

cve-2023-23910

published dec 2022

3.9 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

9.0%

JSON

Out-of-bounds write for some Intel® Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Trace Analyzer and Collector software",
    "versions": [
      {
        "version": "before version 2021.8.0 published Dec 2022",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html