Multiple Intel Products Vulnerabilities

August 19, 2024

Severity

Medium

Analysis Summary

CVE-2024-21806 CVSS:5.5

Intel Ethernet Controllers and Adapters could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper conditions check in Linux kernel mode driver, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-23491 CVSS:6.7

Intel Distribution for GDB Software could allow a local authenticated attacker to gain elevated privileges on the system, caused by uncontrolled search path, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2023-43747 CVSS:6.7

Intel Connectivity Performance Suite Software Installer could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect default permissions, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-23499 CVSS:6.5

Intel Ethernet Controllers and Adapters is vulnerable to a denial of service, caused by protection mechanism failure in firmware. By sending a specially crafted request, an remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-24580 CVSS:6.5

Intel Data Center GPU Max Series are vulnerable to a denial of service, caused by improper conditions check. By sending a specially crafted request, an remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-21769 CVSS:6.7

Intel Ethernet Controllers and Adapters could allow a local authenticated attacker to gain elevated privileges on the system, caused by uncontrolled search path, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-24983 CVSS:6.5

CVE-2024-23909 CVSS:6.7

Intel FPGA SDK for OpenCL Software could allow a local authenticated attacker to gain elevated privileges on the system, caused by uncontrolled search path, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-22184 CVSS:6.7

Intel Quartus Prime Pro Edition Design Software product could allow a locally authenticated attacker to gain elevated privileges on the system caused by an uncontrolled search path. By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-24973 CVSS:2.2

Intel Distribution for GDB Software is vulnerable to a denial of service, caused by improper input validation. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-25562 CVSS:5.8

Intel Distribution for GDB Software is vulnerable to a denial of service, caused by uncaught exception. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-23974 CVSS:6.7

Intel ISH Software Installer could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect default permissions, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-25561 CVSS:6.7

Intel HID Event Filter Software Installer could allow a local authenticated attacker to gain elevated privileges on the system, caused by insecure inherited permissions, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-24977 CVSS:6.7

Intel License Manager for FLEXlm product could allow a locally authenticated attacker to gain elevated privileges on the system caused by an uncontrolled search path; By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-28046 CVSS:6.7

Intel GPA Software could allow a local authenticated attacker to gain elevated privileges on the system, caused by uncontrolled search pat, By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-27461 CVSS:5.6

Intel® Arc & Iris Xe Graphics software is vulnerable to a denial of service, caused by incorrect default permissions in software installer. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.

Impact