CVE-2023-45221

2024-05-1621:15:57

Debian Security Bug Tracker

security-tracker.debian.org

intel media sdk

buffer restrictions

privilege escalation

local access

cve-2023-45221

unix

CVSS3

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

7.6

Confidence

High

JSON

Improper buffer restrictions in Intel® Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

OSVersionArchitecturePackageVersionFilename
Debian12allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian11allintel-mediasdk<= 21.1.0-1intel-mediasdk_21.1.0-1_all.deb
Debian999allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian13allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian12allonevpl<= 2023.1.1-1onevpl_2023.1.1-1_all.deb
Debian999allonevpl<= 1:2.13.0-1onevpl_1:2.13.0-1_all.deb
Debian13allonevpl<= 1:2.13.0-1onevpl_1:2.13.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	11	all	intel-mediasdk	<= 21.1.0-1	intel-mediasdk_21.1.0-1_all.deb
Debian	999	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	13	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	12	all	onevpl	<= 2023.1.1-1	onevpl_2023.1.1-1_all.deb
Debian	999	all	onevpl	<= 1:2.13.0-1	onevpl_1:2.13.0-1_all.deb
Debian	13	all	onevpl	<= 1:2.13.0-1	onevpl_1:2.13.0-1_all.deb