Lucene search
Ubuntu.comUB:CVE-2023-28938HistoryAug 11, 2023 - 12:00 a.m.
CVE-2023-28938
2023-08-1100:00:00
ubuntu.com
ubuntu.com
11
cve-2023-28938
uncontrolled resource consumption
intel ssd tools
denial of service
local access
mdadm-4.2-rc2
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
9.0%
Uncontrolled resource consumption in some Intel® SSD Tools software
before version mdadm-4.2-rc2 may allow a priviledged user to potentially
enable denial of service via local access.
Notes
| Author | Note |
|---|---|
| Priority reason: Denial of service in command line tool option only | |
| mdeslaur | mdadm generally requires root privileges |
Related
veracode
veracode
Denial Of Service (DoS)
2023-09-08 08:05:40
cvelist
cvelist
CVE-2023-28938
2023-08-11 02:36:51
nvd
nvd
CVE-2023-28938
2023-08-11 03:15:27
cbl_mariner
cbl_mariner
CVE-2023-28938 affecting package mdadm for versions less than 4.2-1
2024-03-19 17:21:46
prion
prion
Code injection
2023-08-11 03:15:00
redhatcve
redhatcve
CVE-2023-28938
2023-08-16 19:18:59
osv
osv
CVE-2023-28938
2023-08-11 03:15:27
cve
cve
CVE-2023-28938
2023-08-11 03:15:27
alpinelinux
alpinelinux
CVE-2023-28938
2023-08-11 03:15:27
nessus
nessus
RHEL 8 : mdadm (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : mdadm (Unpatched Vulnerability)
2024-05-11 00:00:00
EulerOS 2.0 SP9 : mdadm (EulerOS-SA-2023-3345)
2024-01-16 00:00:00
debiancve
debiancve
CVE-2023-28938
2023-08-11 03:15:27
openvas
openvas
Huawei EulerOS: Security Advisory for mdadm (EulerOS-SA-2024-1659)
2024-05-16 00:00:00
openSUSE: Security Advisory for mdadm (SUSE-SU-2023:3953-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for mdadm (EulerOS-SA-2024-1018)
2024-01-05 00:00:00
amazon
amazon
Medium: mdadm
2023-09-27 22:48:00
intel
intel
Intel® SSD Tools Software Advisory
2023-08-08 00:00:00
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
9.0%
Related for UB:CVE-2023-28938