Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-49141
HistoryAug 14, 2024 - 12:00 a.m.

CVE-2023-49141

2024-08-1400:00:00
ubuntu.com
ubuntu.com
29
intel processors
cache mechanism
privilege escalation
local access
cve-2023-49141
unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

7.8

Confidence

High

EPSS

0

Percentile

9.5%

JSON

Improper isolation in some Intel® Processors stream cache mechanism may
allow an authenticated user to potentially enable escalation of privilege
via local access.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchintel-microcode< 3.20240813.0ubuntu0.18.04.1+esm2UNKNOWN
ubuntu20.04noarchintel-microcode< 3.20240813.0ubuntu0.20.04.2UNKNOWN
ubuntu22.04noarchintel-microcode< 3.20240813.0ubuntu0.22.04.2UNKNOWN
ubuntu24.04noarchintel-microcode< 3.20240813.0ubuntu0.24.04.2UNKNOWN
ubuntu16.04noarchintel-microcode< 3.20240813.0ubuntu0.16.04.1+esm2UNKNOWN

Related

nvd 1
cve 1
amazon 1
nessus 9
debiancve 1
cvelist 1
alpinelinux 1
vulnrichment 1
osv 4
ubuntu 1
freebsd 1
openvas 7
mageia 1
fedora 2
nvd
nvd
CVE-2023-49141
2024-08-14 14:15:14
cve
cve
CVE-2023-49141
2024-08-14 14:15:14
amazon
amazon
Important: microcode_ctl
2024-09-13 01:16:00
nessus
nessus
Amazon Linux 2 : microcode_ctl (ALAS-2024-2635)
2024-09-18 00:00:00
Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-716)
2024-09-16 00:00:00
Amazon Linux AMI : microcode_ctl (ALAS-2024-1946)
2024-09-17 00:00:00
debiancve
debiancve
CVE-2023-49141
2024-08-14 14:15:14
cvelist
cvelist
CVE-2023-49141
2024-08-14 13:45:37
alpinelinux
alpinelinux
CVE-2023-49141
2024-08-14 14:15:14
vulnrichment
vulnrichment
CVE-2023-49141
2024-08-14 13:45:37
osv
osv
CVE-2023-49141
2024-08-14 14:15:14
intel-microcode vulnerabilities
2024-08-20 00:02:38
Security update for ucode-intel
2024-09-03 14:35:35
ubuntu
ubuntu
Intel Microcode vulnerabilities
2024-08-20 00:00:00
freebsd
freebsd
Intel CPUs -- multiple vulnerabilities
2024-08-13 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:3095-1)
2024-09-04 00:00:00
Ubuntu: Security Advisory (USN-6967-1)
2024-08-20 00:00:00
openSUSE: Security Advisory for ucode (SUSE-SU-2024:3095-1)
2024-09-06 00:00:00
mageia
mageia
Updated microcode package fix security vulnerabilities
2024-09-11 23:42:44
fedora
fedora
[SECURITY] Fedora 39 Update: microcode_ctl-2.1-58.1.fc39
2024-08-13 01:35:40
[SECURITY] Fedora 40 Update: microcode_ctl-2.1-61.1.fc40
2024-08-08 02:48:02

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

7.8

Confidence

High

EPSS

0

Percentile

9.5%

JSON
Related for UB:CVE-2023-49141
nvd1cve1amazon1nessus9debiancve1cvelist1alpinelinux1vulnrichment1osv4ubuntu1freebsd1openvas7mageia1fedora2