PT-2023-8671 · Intel · Intel Qat Software Drivers

Aobo Wang · Published 2023-09-07 · Updated 2024-10-24 · CVE-2023-41252

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) QAT software drivers for Windows versions prior to QAT1.7-W-1.11.0

Description The issue is related to an out-of-bounds read in some Intel(R) QAT software drivers for Windows, which may allow an authenticated user to potentially enable denial of service via local access. This could be exploited to cause a denial of service.

Recommendations For versions prior to QAT1.7-W-1.11.0, update to version QAT1.7-W-1.11.0 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2024-01483

CVE-2023-41252

Affected Products

Intel Qat Software Drivers

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-41252 · Security Note
• https://bdu.fstec.ru/vul/2024-01483 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01000.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41252 · Vendor Advisory
• https://vuldb.com/?id.253817 · Note
• https://twitter.com/CVEnew/status/1757764782986498506 · Twitter Post
• https://t.me/cvenotify/99365 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1757792570602659864 · Twitter Post
• https://support.lenovo.com/us/en/product_security/LEN-152496 · Note
• https://intel.com/content/www/us/en/developer/topic-technology/open/quick-assist-technology/overview.html · Note