Skip to content
OpenAdvisories
Medium · 6.6 CVE-2023-27517 EUVD-2023-31279GHSA-vq4v-4wp7-96x4

Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an …

Published Feb 14, 2024 · Updated Aug 16, 2024 · Assigned by intel

Description

Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 12 ipmctl No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS ipmctl No fix yet —
Ubuntu 20.04 LTS ipmctl No fix yet —

References