openwall.com
http://www.openwall.com/lists/oss-security/2023/11/14/4 CVE-2023-23583
HIGH
Record summary
CVE-2023-23583 has a selected CVSS score of 8.8 (high); EIP currently links 1 repository PoC.
Description
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 16, 2023 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Intel(R) ProcessorsDefault status: unaffected | CVE List | See references | affected |
Proofs of concept
1Repository PoCs
GitHubMav3r1ck0x1/CVE-2023-23583-Reptar-Repository PoCby Mav3r1ck0x1Stars: 0Not analyzed5 files
References
11openwall.com
http://www.openwall.com/lists/oss-security/2023/11/14/5 openwall.com
http://www.openwall.com/lists/oss-security/2023/11/14/6 openwall.com
http://www.openwall.com/lists/oss-security/2023/11/14/7 openwall.com
http://www.openwall.com/lists/oss-security/2023/11/14/8 openwall.com
http://www.openwall.com/lists/oss-security/2023/11/14/9 lists.debian.org
https://lists.debian.org/debian-lts-announce/2023/12/msg00012.html nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-23583 security.netapp.com
https://security.netapp.com/advisory/ntap-20231116-0015 debian.org
https://www.debian.org/security/2023/dsa-5563 intel.com
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html