Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-24489

Опубликовано: 08 июн. 2021
Источник: redhat
CVSS3: 8.8

Описание

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

A flaw was found in Intel® VT-d products. Entries from the context cache on some types of context cache invalidations may not be properly invalidated which may allow an authenticated user to potentially enable escalation of privilege via local access. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Дополнительная информация

Статус:

Important
Дефект:
CWE-459
https://bugzilla.redhat.com/show_bug.cgi?id=1962650hw: vt-d related privilege escalation

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 5 лет назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS3: 8.8
nvd
почти 5 лет назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS3: 8.8
debian
почти 5 лет назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authent ...

CVSS3: 8.8
github
почти 4 года назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS3: 8.8
fstec
почти 5 лет назад

Уязвимость реализации технологии виртуализации Intel Virtualization Technology for Directed I/0 (VT-d), существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю повысить свои привилегии

8.8 High

CVSS3

Уязвимость CVE-2020-24489