CVE-2023-47855

🗓️ 16 May 2024 20:47:25Reported by intelType

Improper input validation in Intel TDX module version 1.5.05.46.698 allows local privilege escalation

Reporter	Title	Published	Views	Family All 54
AstraLinux	Astra Linux - уязвимость в intel-microcode	3 May 202623:59	–	astralinux
BDU FSTEC	The vulnerability of Intel microprogramming software, related to synchronization errors in control logic, allows attackers to exploit this to disclose protected information.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Core Ultra processor microprogramming software, related to processor locking, allows a hacker to trigger a service failure.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Trusted Execution Environment (TEE) for the deployment of Intel Trust Domain Extensions (Intel TDX) allows a perpetrator to exploit their privileges by improperly checking input data.	18 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Trusted Execution Environment (TEE) for the deployment of Intel Trust Domain Extensions (Intel TDX) allows a perpetrator to exploit their privileges by improperly checking input data.	18 Dec 202400:00	–	bdu_fstec
Cloud Foundry	USN-6797-1: Intel Microcode vulnerabilities \| Cloud Foundry	25 Jul 202400:00	–	cloudfoundry
CNNVD	Intel Trust Domain Extensions 安全漏洞	16 May 202400:00	–	cnnvd
CVE	CVE-2023-47855	16 May 202420:47	–	cve
Debian CVE	CVE-2023-47855	16 May 202420:47	–	debiancve
EUVD	EUVD-2023-51950	3 Oct 202520:07	–	euvd

[
  {
    "vendor": "n/a",
    "product": "Intel(R) TDX module software",
    "versions": [
      {
        "version": "before version 1.5.05.46.698",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240621-0003/
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html

21 Jun 2024 19:08Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16

EPSS0.00074

CWE-20