PT-2023-8671 · Intel · Intel Qat Software Drivers

Aobo Wang · CVE-2023-41252 · Publicado 2023-09-07 · Atualizado 2024-10-24

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) QAT software drivers for Windows versions prior to QAT1.7-W-1.11.0

Description The issue is related to an out-of-bounds read in some Intel(R) QAT software drivers for Windows, which may allow an authenticated user to potentially enable denial of service via local access. This could be exploited to cause a denial of service.

Recommendations For versions prior to QAT1.7-W-1.11.0, update to version QAT1.7-W-1.11.0 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

BDU:2024-01483

CVE-2023-41252

Produtos afetados

Intel Qat Software Drivers

Referências · 10

• https://vuldb.com/?id.253817 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-41252 · Nota de Segurança
• https://twitter.com/CVEnew/status/1757764782986498506 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-01483 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01000.html · Aviso do Fabricante
• https://t.me/cvenotify/99365 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-41252 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1757792570602659864 · Publicação no Twitter
• https://support.lenovo.com/us/en/product_security/LEN-152496 · Nota
• https://intel.com/content/www/us/en/developer/topic-technology/open/quick-assist-technology/overview.html · Nota