Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-24489

Опубликовано: 08 июн. 2021
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

A flaw was found in Intel® VT-d products. Entries from the context cache on some types of context cache invalidations may not be properly invalidated which may allow an authenticated user to potentially enable escalation of privilege via local access. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Дополнительная информация

Статус:

Important
Дефект:
CWE-459
https://bugzilla.redhat.com/show_bug.cgi?id=1962650hw: vt-d related privilege escalation

EPSS

Процентиль: 16%
0.00052
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 4 лет назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS3: 8.8
nvd
около 4 лет назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS3: 8.8
debian
около 4 лет назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authent ...

CVSS3: 8.8
github
около 3 лет назад

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS3: 8.8
fstec
около 4 лет назад

Уязвимость реализации технологии виртуализации Intel Virtualization Technology for Directed I/0 (VT-d), существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 16%
0.00052
Низкий

8.8 High

CVSS3