PT-2024-1789 · Intel · Intel(R) Pcm

Pedro Baptista · Published 2024-02-14 · Updated 2024-10-29 · CVE-2023-34351

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) PCM software versions prior to 202307

Description The issue is related to a buffer underflow in some Intel(R) PCM software, which may allow an unauthenticated user to potentially enable denial of service via network access. This could be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 202307, update to version 202307 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

CWE-124

Related Identifiers

BDU:2024-01521

CVE-2023-34351

Affected Products

Intel(R) Pcm

References · 6

• https://osv.dev/vulnerability/CVE-2023-34351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34351 · Security Note
• https://bdu.fstec.ru/vul/2024-01521 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00954.html · Vendor Advisory
• https://twitter.com/cracbot/status/1758008290825609635 · Twitter Post
• https://twitter.com/CVEnew/status/1757764811671458018 · Twitter Post