PT-2023-9798 · Intel+6 · Intel Tdx+6
Andrey Markovytch
+5
·
Publicado
2023-11-18
·
Atualizado
2025-03-26
·
CVE-2023-47855
CVSS v3.1
6.7
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Intel TDX versions prior to 1.5.05.46.698
Description
The issue is related to improper input validation in some Intel TDX module software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could permit an attacker to increase their privileges.
Recommendations
For versions prior to 1.5.05.46.698, update to version 1.5.05.46.698 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Intel Tdx
Linuxmint
Red Os
Suse
Ubuntu