CVE-2023-25775

Published: Aug 11, 2023Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected (1)

Products: Intel: Ethernet Controller Rdma Driver For Linux

Intel

1 product

Ethernet Controller Rdma Driver For Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Intel Ethernet Controller Rdma Driver For Linux	Before 1.9.30

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (8)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html

Source: secure@intel.com

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html

Source: secure@intel.com

https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html

Source: secure@intel.com

https://security.netapp.com/advisory/ntap-20230915-0013/

Source: secure@intel.com

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20230915-0013/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.