CVE-2023-22840

LOW3.3

Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22

Published Aug 11, 2023

Modified 1 years ago

Details

Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access.

References

WEB

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html

WEB

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J7RNFPWOSFII2JE2KDRHPLJANZC3YATW/

WEB

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L27GRS7E45IOCZ44VQX2NJ33GVRBWHBS/

WEB

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TULYSWHC3X76AIGGMUSLBTWOXNND6IEV/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2023-22840

CVSS Analysis

CVSS v3.1

3.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

LowA:L

3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness Type (CWE)

Other

CWE-86

Ecosystems

Timeline

PublishedAug 11, 2023

ModifiedFeb 13, 2025

CVE-2023-22840 | Mondoo Vulnerability Intelligence