PT-2024-26944 · Intel+1 · Intel Optane Pmem Management+1

J00Sean · Published 2024-11-13 · Updated 2024-11-15 · CVE-2024-36275

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Optane(TM) PMem Management software versions prior to CR MGMT 02.00.00.4040 Intel(R) Optane(TM) PMem Management software versions prior to CR MGMT 03.00.00.0499

Description A NULL pointer dereference issue in the Intel(R) Optane(TM) PMem Management software may allow an authenticated user to potentially enable denial of service via local access.

Recommendations For versions prior to CR MGMT 02.00.00.4040, update to CR MGMT 02.00.00.4040 or later. For versions prior to CR MGMT 03.00.00.0499, update to CR MGMT 03.00.00.0499 or later.

Fix

DoS

Weakness Enumeration

CWE-395

Related Identifiers

CVE-2024-36275

Affected Products

Debian

Intel Optane Pmem Management

References · 10

• https://osv.dev/vulnerability/UBUNTU-CVE-2024-36275 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-36275 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-36275 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-36275 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36275 · Security Note
• https://ubuntu.com/security/CVE-2024-36275 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-36275 · Security Note
• https://github.com/intel/ipmctl/commit/59d74ca68fcde3f1a11298a935b470fac09904aa · Note
• https://twitter.com/CVEnew/status/1856808169290272836 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01189.html · Note