Lucene search

K
nvd[email protected]NVD:CVE-2023-28410
HistoryMay 10, 2023 - 2:15 p.m.

CVE-2023-28410

2023-05-1014:15:33
CWE-119
CWE-787
web.nvd.nist.gov
7
cve-2023-28410
memory buffer
linux kernel
escalation of privilege
local access

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0

Percentile

9.0%

Improper restriction of operations within the bounds of a memory buffer in some Intelยฎ i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
inteli915_graphicsRange<6.2.10linux
VendorProductVersionCPE
inteli915_graphics*cpe:2.3:a:intel:i915_graphics:*:*:*:*:*:linux:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0

Percentile

9.0%