CVE-2024-25939

2024-08-1413:45:21

CWE-1251

intel

github.com

intel

xeon

scalable

processors

denial of service

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

CVSS4

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Mirrored regions with different values in 3rd Generation Intel® Xeon® Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "3rd Generation Intel(R) Xeon(R) Scalable Processors",
    "versions": [
      {
        "status": "affected",
        "version": "3rd Generation Intel(R) Xeon(R) Scalable Processors"
      }
    ],
    "defaultStatus": "unaffected"
  }
]