4.4

CVE-2023-22327

Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Stratix 10 Dx 1100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Dx 1100 Fpga Version -
Intel ≫ Stratix 10 Dx 2100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Dx 2100 Fpga Version -
Intel ≫ Stratix 10 Dx 2800 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Dx 2800 Fpga Version -
Intel ≫ Stratix 10 Gx 10m Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 10m Fpga Version -
Intel ≫ Stratix 10 Gx 1100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 1100 Fpga Version -
Intel ≫ Stratix 10 Gx 1650 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 1650 Fpga Version -
Intel ≫ Stratix 10 Gx 1660 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 1660 Fpga Version -
Intel ≫ Stratix 10 Gx 2100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 2100 Fpga Version -
Intel ≫ Stratix 10 Gx 2110 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 2110 Fpga Version -
Intel ≫ Stratix 10 Gx 2500 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 2500 Fpga Version -
Intel ≫ Stratix 10 Gx 2800 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 2800 Fpga Version -
Intel ≫ Stratix 10 Gx 400 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 400 Fpga Version -
Intel ≫ Stratix 10 Gx 650 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 650 Fpga Version -
Intel ≫ Stratix 10 Gx 850 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Gx 850 Fpga Version -
Intel ≫ Stratix 10 Mx 1650 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Mx 1650 Fpga Version -
Intel ≫ Stratix 10 Mx 2100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Mx 2100 Fpga Version -
Intel ≫ Stratix 10 Nx 2100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Nx 2100 Fpga Version -
Intel ≫ Stratix 10 Sx 1100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 1100 Fpga Version -
Intel ≫ Stratix 10 Sx 1650 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 1650 Fpga Version -
Intel ≫ Stratix 10 Sx 2100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 2100 Fpga Version -
Intel ≫ Stratix 10 Sx 2500 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 2500 Fpga Version -
Intel ≫ Stratix 10 Sx 2800 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 2800 Fpga Version -
Intel ≫ Stratix 10 Sx 400 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 400 Fpga Version -
Intel ≫ Stratix 10 Sx 650 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 650 Fpga Version -
Intel ≫ Stratix 10 Sx 850 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Sx 850 Fpga Version -
Intel ≫ Stratix 10 Tx 1100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Tx 1100 Fpga Version -
Intel ≫ Stratix 10 Tx 1650 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Tx 1650 Fpga Version -
Intel ≫ Stratix 10 Tx 2100 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Tx 2100 Fpga Version -
Intel ≫ Stratix 10 Tx 2500 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Tx 2500 Fpga Version -
Intel ≫ Stratix 10 Tx 2800 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Tx 2800 Fpga Version -
Intel ≫ Stratix 10 Tx 400 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Tx 400 Fpga Version -
Intel ≫ Stratix 10 Tx 850 Fpga Firmware Version < 2.8.1
   Intel ≫ Stratix 10 Tx 850 Fpga Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.132
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Intel 6 0.8 5.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00957.html
Patch
Vendor Advisory