2024-08-14 16:03:15 +00:00
{
"id" : "CVE-2024-23909" ,
"sourceIdentifier" : "secure@intel.com" ,
"published" : "2024-08-14T14:15:20.447" ,
2024-09-06 22:03:17 +00:00
"lastModified" : "2024-09-06T20:33:05.670" ,
"vulnStatus" : "Analyzed" ,
2024-08-14 16:03:15 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access."
2024-08-18 02:03:12 +00:00
} ,
{
"lang" : "es" ,
"value" : " La ruta de b\u00fasqueda no controlada en algunas tecnolog\u00edas de software Intel(R) FPGA SDK para OpenCL(TM) puede permitir que un usuario autenticado potencialmente habilite la escalada de privilegios a trav\u00e9s del acceso local."
2024-08-14 16:03:15 +00:00
}
] ,
"metrics" : {
"cvssMetricV40" : [
{
"source" : "secure@intel.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "4.0" ,
"vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"attackRequirements" : "PRESENT" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "ACTIVE" ,
"vulnerableSystemConfidentiality" : "HIGH" ,
"vulnerableSystemIntegrity" : "HIGH" ,
"vulnerableSystemAvailability" : "HIGH" ,
"subsequentSystemConfidentiality" : "NONE" ,
"subsequentSystemIntegrity" : "NONE" ,
"subsequentSystemAvailability" : "NONE" ,
"exploitMaturity" : "NOT_DEFINED" ,
"confidentialityRequirements" : "NOT_DEFINED" ,
"integrityRequirements" : "NOT_DEFINED" ,
"availabilityRequirements" : "NOT_DEFINED" ,
"modifiedAttackVector" : "NOT_DEFINED" ,
"modifiedAttackComplexity" : "NOT_DEFINED" ,
"modifiedAttackRequirements" : "NOT_DEFINED" ,
"modifiedPrivilegesRequired" : "NOT_DEFINED" ,
"modifiedUserInteraction" : "NOT_DEFINED" ,
"modifiedVulnerableSystemConfidentiality" : "NOT_DEFINED" ,
"modifiedVulnerableSystemIntegrity" : "NOT_DEFINED" ,
"modifiedVulnerableSystemAvailability" : "NOT_DEFINED" ,
"modifiedSubsequentSystemConfidentiality" : "NOT_DEFINED" ,
"modifiedSubsequentSystemIntegrity" : "NOT_DEFINED" ,
"modifiedSubsequentSystemAvailability" : "NOT_DEFINED" ,
"safety" : "NOT_DEFINED" ,
"automatable" : "NOT_DEFINED" ,
"recovery" : "NOT_DEFINED" ,
"valueDensity" : "NOT_DEFINED" ,
"vulnerabilityResponseEffort" : "NOT_DEFINED" ,
"providerUrgency" : "NOT_DEFINED" ,
"baseScore" : 5.4 ,
"baseSeverity" : "MEDIUM"
}
}
] ,
"cvssMetricV31" : [
2024-09-06 22:03:17 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
} ,
2024-08-14 16:03:15 +00:00
{
"source" : "secure@intel.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 6.7 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 0.8 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
2024-09-06 22:03:17 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-427"
}
]
} ,
2024-08-14 16:03:15 +00:00
{
"source" : "secure@intel.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-427"
}
]
}
] ,
2024-09-06 22:03:17 +00:00
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:pro:*:*:*" ,
"matchCriteriaId" : "31BFC77B-63EF-4A98-BC60-159CED8B08E4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:standard:*:*:*" ,
"matchCriteriaId" : "ECB72360-F39C-4E01-B63E-24AFAA3FBBCD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:pro:*:*:*" ,
"matchCriteriaId" : "276AAB67-9B1F-44EA-AD30-EFEA3ACE9436"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:standard:*:*:*" ,
"matchCriteriaId" : "7BAB04E2-90A5-4EDE-BBDE-B1F96E2B4FB2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "CB9F6105-B0B9-48EF-9B48-728B48DE4E78"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "3E7E25DD-47F2-4754-9EA4-880C481EBC36"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "604E6194-5C3B-4B11-9E84-030EBFE3C33D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "C9417D4C-883D-4828-AAB1-AC003D7A7DEC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "4A40D4F0-0C25-4AB0-A56B-2BF23FEB52FE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "59AB3FF5-8CF6-4EC0-B09F-C6253CECB440"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "5443B45A-313C-4C97-9FAF-4FBC5D893B09"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "0D8A4D04-3AE1-41BE-9596-3A29EAF3AF5E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "992EBFA9-A583-4CE8-BB5E-60BFFC0C6760"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "22FC2247-2E6B-4203-9D13-9A8C614E579F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "AA4530CE-D098-4400-BFE2-2D30011F5020"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "77DD87B7-12EA-4A19-9510-0C452ACC9F33"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "09C209A6-BF65-444C-A840-FB93FA2F8185"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "F8651853-2A7F-4955-8CCF-688171C5321F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "BEDCD55A-17A5-49A2-9E71-3BD1E0FF65E6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "D228509F-F82F-4CA4-8643-D9F4694CB740"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "1E61AF90-76BC-46FD-A32C-62C4D17EA277"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "6FB570E8-3E1B-42E4-A9DA-FC43F48578DC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "826D188C-352E-402A-8069-0A717BB53B96"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "B8E2CE09-80E4-4730-9CA8-09A70E2ACD06"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "FDC51D37-FB6B-497E-B6BC-61BE90357449"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "07B861CD-0090-47FE-B4CD-D89D70CFD3DE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "07537F69-D4F4-4648-BD1F-9468A5078A6A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:standard:*:*:*" ,
"matchCriteriaId" : "DB8DC11C-72CD-42CC-9945-23F040498F19"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.2:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "B2F1954B-D4BA-463D-971E-24088345987A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.3:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "F65A15C1-AACA-4081-96E8-8BBD354F75DD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.4:*:*:*:pro:*:*:*" ,
"matchCriteriaId" : "02C01340-C6DE-4BB1-8AEA-0B277EA9EDDA"
}
]
}
]
}
] ,
2024-08-14 16:03:15 +00:00
"references" : [
{
"url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html" ,
2024-09-06 22:03:17 +00:00
"source" : "secure@intel.com" ,
"tags" : [
"Vendor Advisory"
]
2024-08-14 16:03:15 +00:00
}
]
}
