PT-2023-4427 · Intel+10 · Intel(R) Ethernet Controller Rdma Driver+10
Christopher Bednarz
+3
·
Publicado
2023-08-11
·
Atualizado
2025-01-13
·
CVE-2023-25775
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Intel(R) Ethernet Controller RDMA driver for linux versions prior to 1.9.30
Description
The issue is related to improper access control in the Intel(R) Ethernet Controller RDMA driver for Linux. This may allow an unauthenticated user to potentially enable escalation of privilege via network access. The vulnerability can be exploited by a remote attacker to increase their privileges.
Recommendations
For versions prior to 1.9.30, update to version 1.9.30 or later to resolve the issue. As a temporary workaround, consider restricting network access to the RDMA driver until a patch is applied.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Intel(R) Ethernet Controller Rdma Driver
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu