PT-2023-21178 · Intel · Intel Optimization For Tensorflow

Jingyi Shi · Publicado 2023-08-11 · Atualizado 2023-08-16 · CVE-2023-27506

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Optimization for Tensorflow versions prior to 2.12

Description The issue is related to improper buffer restrictions, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 2.12, update to version 2.12 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-92

Identificadores relacionados

CVE-2023-27506

GHSA-M2F8-V8Q4-3M59

Produtos afetados

Intel Optimization For Tensorflow

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-27506 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1690556420159062016 · Publicação no Twitter
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00840.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-27506 · Nota de Segurança
• https://t.me/cvenotify/56677 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-m2f8-v8q4-3m59 · Aviso do Fabricante