PT-2024-8902 · Intel · Intel(R) Fpga

Falcon Corruption · Published 2024-08-13 · Updated 2024-09-12 · CVE-2024-23908

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) FPGA software versions prior to v11.19.5.0

Description: The issue is related to insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software. This may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations: For versions prior to v11.19.5.0, update to version v11.19.5.0 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Flexlm License Daemons until a patch is applied.

Fix

Incorrect Permission

Weakness Enumeration

CWE-277

CWE-732

Related Identifiers

BDU:2024-10569

CVE-2024-23908

Affected Products

Intel(R) Fpga

References · 7

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01107.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10569 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-23908 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23908 · Vendor Advisory
• https://twitter.com/CVEnew/status/1823719158745285032 · Twitter Post
• https://vuldb.com/?id.274596 · Note
• https://t.me/cvenotify/94415 · Telegram Post