CVE-2023-47282

2024-05-1621:16:00

Debian Security Bug Tracker

security-tracker.debian.org

out-of-bounds write

intel media sdk

onevpl software

privilege escalation

local access

cve-2023-47282

unix

CVSS3

3.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

AI Score

7.5

Confidence

High

JSON

Out-of-bounds write in Intel® Media SDK all versions and some Intel® oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

OSVersionArchitecturePackageVersionFilename
Debian12allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian11allintel-mediasdk<= 21.1.0-1intel-mediasdk_21.1.0-1_all.deb
Debian999allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian13allintel-mediasdk<= 22.5.4-1intel-mediasdk_22.5.4-1_all.deb
Debian12allonevpl<= 2023.1.1-1onevpl_2023.1.1-1_all.deb
Debian999allonevpl<= 1:2.13.0-1onevpl_1:2.13.0-1_all.deb
Debian13allonevpl<= 1:2.13.0-1onevpl_1:2.13.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	11	all	intel-mediasdk	<= 21.1.0-1	intel-mediasdk_21.1.0-1_all.deb
Debian	999	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	13	all	intel-mediasdk	<= 22.5.4-1	intel-mediasdk_22.5.4-1_all.deb
Debian	12	all	onevpl	<= 2023.1.1-1	onevpl_2023.1.1-1_all.deb
Debian	999	all	onevpl	<= 1:2.13.0-1	onevpl_1:2.13.0-1_all.deb
Debian	13	all	onevpl	<= 1:2.13.0-1	onevpl_1:2.13.0-1_all.deb