K000150394: Intel QuickAssist Technology vulnerabilities CVE-2024-29223, CVE-2023-32277, CVE-2024-31153, and CVE-2024-31858

Security Advisory Description CVE-2024-29223 Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-32277 Untrusted Pointer Dereference in I/O subsystem...

Intel QuickAssist Technology Buffer Overflow

The vulnerability of the Intel QuickAssist Technology QAT driver package relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Intel QuickAssist Technology Driver Heap Buffer Overflow DoS

The vulnerability of the Intel QuickAssist Technology QAT driver package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Intel QuickAssist Technology Driver Uncontrolled Search Path

The vulnerability of the Intel QuickAssist Technology QAT driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel QuickAssist Technology QAT Input Output Subsystem Unauthorized Access

The vulnerability of the input/output subsystem of the Intel QuickAssist Technology QAT driver package is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Intel QAT software untrusted pointer dereference vulnerability

Intel QAT software refers to the collection of software components that support Intel QuickAssist technology. An untrusted pointer dereference vulnerability exists in Intel QAT software, which can be exploited by an attacker to access compromised information via the local system...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

CVE-2024-31153 involves Intel(R) QuickAssist Technology software prior to version 2.2.0 with an improper input validation flaw. An authenticated local user may trigger denial of service. Intel recommends updating to version 2.2.0 or later. The issue is documented in Intel’s advisory (INTEL-SA-011...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...