Improper Buffer Restrictions in Intel QAT Library Software
CVE-2023-22313

2.3LOW

Key Information:

Vendor

Intel
Status
Intel(R) QAT Library software
Vendor
CVE Published:
14 November 2023

What is CVE-2023-22313?

Certain versions of the Intel QAT Library software were found to have improper buffer restrictions, which may lead to potential information disclosure if exploited by a privileged user with local access. Users are encouraged to upgrade to version 22.07.1 or later to mitigate these risks and safeguard sensitive information.

Affected Version(s)

Intel(R) QAT Library software before version 22.07.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.