Lucene search

K
vulnrichmentQualcommVULNRICHMENT:CVE-2023-33036
HistoryJan 02, 2024 - 5:38 a.m.

CVE-2023-33036 NULL Pointer Dereference in Hypervisor

2024-01-0205:38:30
CWE-476
qualcomm
github.com
cve-2023-33036
hypervisor
permanent dos
untrusted vm
psci call

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-33036