CVE-2023-48368

2024-05-1621:16:01

Debian Security Bug Tracker

security-tracker.debian.org

intel media sdk

denial of service

input validation

local access

cve-2023-48368

unix

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

AI Score

6.9

Confidence

High

JSON

Improper input validation in Intel® Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.

OSVersionArchitecturePackageVersionFilename
Debian12allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian11allintel-mediasdk<= 21.1.0-1intel-mediasdk_21.1.0-1_all.deb
Debian999allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian13allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian12allonevpl<= 2023.1.1-1onevpl_2023.1.1-1_all.deb
Debian999allonevpl<= 1:2.13.0-1onevpl_1:2.13.0-1_all.deb
Debian13allonevpl<= 1:2.13.0-1onevpl_1:2.13.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	11	all	intel-mediasdk	<= 21.1.0-1	intel-mediasdk_21.1.0-1_all.deb
Debian	999	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	13	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	12	all	onevpl	<= 2023.1.1-1	onevpl_2023.1.1-1_all.deb
Debian	999	all	onevpl	<= 1:2.13.0-1	onevpl_1:2.13.0-1_all.deb
Debian	13	all	onevpl	<= 1:2.13.0-1	onevpl_1:2.13.0-1_all.deb