CVE-2020-24489
Description
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
Risk Information
Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.068
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2021:1929-1(SUSE Linux Enterprise Server 12-SP5 ) ucode-intel-20210525-3.35.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1929-1(SUSE Linux Enterprise Server 12-SP5 ) ucode-intel-debuginfo-20210525-3.35.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1929-1(SUSE Linux Enterprise Server 12-SP5 ) ucode-intel-debugsource-20210525-3.35.1.x86_64.rpm | Linux |
| intel-microcode security update(DSA-4934-1) intel-microcode_3.20210608.2~deb10u1_i386.deb | Linux |
| intel-microcode security update(DSA-4934-1) intel-microcode_3.20210608.2~deb10u1_amd64.deb | Linux |
| Microcode_ctl update (ELSA-2021-2308) microcode_ctl-20210216-1.20210525.1.0.1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:3027) microcode_ctl security, bug fix and enhancement update microcode_ctl-20210216-1.20210608.1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:3028) microcode_ctl security, bug fix and enhancement update microcode_ctl-2.1-73.11.el7_9.x86_64.rpm | Linux |
| Microcode_ctl update (ELSA-2021-3027) microcode_ctl-20210216-1.20210608.1.0.1.el8_4.x86_64.rpm | Linux |
| (RHSA-2021:3028)Important: security, bug fix and enhancement update microcode_ctl-debuginfo-2.1-73.11.el7_9.x86_64.rpm | Linux |
| Incomplete Cleanup Vulnerability (CVE-2020-24489) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234