Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-23583
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-23583

2023-11-1419:15:18
Debian Security Bug Tracker
security-tracker.debian.org
16
cve-2023-23583
processor instructions
unexpected behavior
privileged escalation
information disclosure
denial of service
intel processors
local access
unix

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0

Percentile

5.1%

Sequence of processor instructions leads to unexpected behavior for some Intelยฎ Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0

Percentile

5.1%