admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-28 17:21:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2024/CVE-2024-239xx/CVE-2024-23909.json
cad-safe-bot 7fe4afc3bb Auto-Update: 2024-09-06T22:00:17.582193+00:00
2024-09-06 22:03:17 +00:00

304 lines
13 KiB
JSON
Raw Blame History

{
"id": "CVE-2024-23909",
"sourceIdentifier": "secure@intel.com",
"published": "2024-08-14T14:15:20.447",
"lastModified": "2024-09-06T20:33:05.670",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access."
},
{
"lang": "es",
"value": " La ruta de b\u00fasqueda no controlada en algunas tecnolog\u00edas de software Intel(R) FPGA SDK para OpenCL(TM) puede permitir que un usuario autenticado potencialmente habilite la escalada de privilegios a trav\u00e9s del acceso local."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "secure@intel.com",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnerableSystemConfidentiality": "HIGH",
"vulnerableSystemIntegrity": "HIGH",
"vulnerableSystemAvailability": "HIGH",
"subsequentSystemConfidentiality": "NONE",
"subsequentSystemIntegrity": "NONE",
"subsequentSystemAvailability": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirements": "NOT_DEFINED",
"integrityRequirements": "NOT_DEFINED",
"availabilityRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnerableSystemConfidentiality": "NOT_DEFINED",
"modifiedVulnerableSystemIntegrity": "NOT_DEFINED",
"modifiedVulnerableSystemAvailability": "NOT_DEFINED",
"modifiedSubsequentSystemConfidentiality": "NOT_DEFINED",
"modifiedSubsequentSystemIntegrity": "NOT_DEFINED",
"modifiedSubsequentSystemAvailability": "NOT_DEFINED",
"safety": "NOT_DEFINED",
"automatable": "NOT_DEFINED",
"recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"baseScore": 5.4,
"baseSeverity": "MEDIUM"
}
}
],
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "secure@intel.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-427"
}
]
},
{
"source": "secure@intel.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-427"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:pro:*:*:*",
"matchCriteriaId": "31BFC77B-63EF-4A98-BC60-159CED8B08E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:-:*:*:standard:*:*:*",
"matchCriteriaId": "ECB72360-F39C-4E01-B63E-24AFAA3FBBCD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:pro:*:*:*",
"matchCriteriaId": "276AAB67-9B1F-44EA-AD30-EFEA3ACE9436"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.0:sp1:*:*:standard:*:*:*",
"matchCriteriaId": "7BAB04E2-90A5-4EDE-BBDE-B1F96E2B4FB2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "CB9F6105-B0B9-48EF-9B48-728B48DE4E78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:13.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "3E7E25DD-47F2-4754-9EA4-880C481EBC36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "604E6194-5C3B-4B11-9E84-030EBFE3C33D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "C9417D4C-883D-4828-AAB1-AC003D7A7DEC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "4A40D4F0-0C25-4AB0-A56B-2BF23FEB52FE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:14.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "59AB3FF5-8CF6-4EC0-B09F-C6253CECB440"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "5443B45A-313C-4C97-9FAF-4FBC5D893B09"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "0D8A4D04-3AE1-41BE-9596-3A29EAF3AF5E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "992EBFA9-A583-4CE8-BB5E-60BFFC0C6760"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:15.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "22FC2247-2E6B-4203-9D13-9A8C614E579F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "AA4530CE-D098-4400-BFE2-2D30011F5020"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "77DD87B7-12EA-4A19-9510-0C452ACC9F33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "09C209A6-BF65-444C-A840-FB93FA2F8185"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:16.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "F8651853-2A7F-4955-8CCF-688171C5321F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "BEDCD55A-17A5-49A2-9E71-3BD1E0FF65E6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "D228509F-F82F-4CA4-8643-D9F4694CB740"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "1E61AF90-76BC-46FD-A32C-62C4D17EA277"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:17.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "6FB570E8-3E1B-42E4-A9DA-FC43F48578DC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:pro:*:*:*",
"matchCriteriaId": "826D188C-352E-402A-8069-0A717BB53B96"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.0:*:*:*:standard:*:*:*",
"matchCriteriaId": "B8E2CE09-80E4-4730-9CA8-09A70E2ACD06"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "FDC51D37-FB6B-497E-B6BC-61BE90357449"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:18.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "07B861CD-0090-47FE-B4CD-D89D70CFD3DE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:pro:*:*:*",
"matchCriteriaId": "07537F69-D4F4-4648-BD1F-9468A5078A6A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.1:*:*:*:standard:*:*:*",
"matchCriteriaId": "DB8DC11C-72CD-42CC-9945-23F040498F19"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.2:*:*:*:pro:*:*:*",
"matchCriteriaId": "B2F1954B-D4BA-463D-971E-24088345987A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.3:*:*:*:pro:*:*:*",
"matchCriteriaId": "F65A15C1-AACA-4081-96E8-8BBD354F75DD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:field_programmable_gate_array_software_development_kit_for_opencl:19.4:*:*:*:pro:*:*:*",
"matchCriteriaId": "02C01340-C6DE-4BB1-8AEA-0B277EA9EDDA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html",
"source": "secure@intel.com",
"tags": [
"Vendor Advisory"
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink