qatlib bug fix update

An update is available for qatlib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Intel QuickAssist Technology Intel QAT provides hardware acceleration for...

K000150394: Intel QuickAssist Technology vulnerabilities CVE-2024-29223, CVE-2023-32277, CVE-2024-31153, and CVE-2024-31858

Security Advisory Description CVE-2024-29223 Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-32277 Untrusted Pointer Dereference in I/O subsystem...

The vulnerability of the Intel QuickAssist Technology (QAT) driver package, which involves reading beyond the buffer in memory, allows attackers to exploit their privileges.

The vulnerability of the Intel QuickAssist Technology QAT driver package relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Intel QuickAssist Technology (QAT) driver package lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel QuickAssist Technology QAT driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the input/output subsystem of the Intel QuickAssist Technology (QAT) driver package allows a hacker to gain unauthorized access to protected information.

The vulnerability of the input/output subsystem of the Intel QuickAssist Technology QAT driver package is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31153

CVE-2024-31153 involves Intel(R) QuickAssist Technology software prior to version 2.2.0 with an improper input validation flaw. An authenticated local user may trigger denial of service. Intel recommends updating to version 2.2.0 or later. The issue is documented in Intel’s advisory (INTEL-SA-011...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

CVE-2024-29223 concerns Intel(R) QuickAssist Technology software before version 2.2.0. The issue is an uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Connected Intel advisories also reference related CVEs (CVE-2024-31858, CVE-2023-32277, CVE...

CVE-2024-31858

Intel QuickAssist Technology software before version 2.2.0 is affected by CVE-2024-31858 due to an out-of-bounds write that could allow an authenticated user to escalate privileges via local access. The advisory and related sources consistently identify the affected component as Intel(R) QuickAss...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...