Arm DS for Intel® SoC FPGA Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00930.html...

CVE-2022-43702

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...

CVE-2022-43702 Incomplete verification of installation file signature

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...

CVE-2022-43702

Arm DS for Intel SoC FPGA software is affected by CVE-2022-43702 due to improper access control in the installer, potentially allowing a local-authenticated user to escalate privileges. The advisory notes all versions are affected and assigns a CVSS v3.1 base score of 8.8 (High). Remediation advi...

CVE-2022-43702 Incomplete verification of installation file signature

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...