Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-29214

Опубликовано: 12 фев. 2025
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10microcode_ctlNot affected
Red Hat Enterprise Linux 8microcode_ctlAffected
Red Hat Enterprise Linux 7.7 Advanced Update Supportmicrocode_ctlFixedRHBA-2025:242806.03.2025
Red Hat Enterprise Linux 7 Extended Lifecycle Supportmicrocode_ctlFixedRHEA-2025:242706.03.2025
Red Hat Enterprise Linux 8.2 Advanced Update Supportmicrocode_ctlFixedRHEA-2025:242406.03.2025
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHEA-2025:242306.03.2025
Red Hat Enterprise Linux 8.4 Telecommunications Update Servicemicrocode_ctlFixedRHEA-2025:242306.03.2025
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsmicrocode_ctlFixedRHEA-2025:242306.03.2025
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportmicrocode_ctlFixedRHEA-2025:242206.03.2025
Red Hat Enterprise Linux 8.6 Telecommunications Update Servicemicrocode_ctlFixedRHEA-2025:242206.03.2025

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=2345365microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm

EPSS

Процентиль: 8%
0.00032
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
9 месяцев назад

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS3: 7.5
nvd
9 месяцев назад

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS3: 7.5
debian
9 месяцев назад

Improper input validation in UEFI firmware CseVariableStorageSmm for s ...

CVSS3: 7.5
github
9 месяцев назад

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS3: 7.5
fstec
9 месяцев назад

Уязвимость модуля CseVariableStorageSmm микропрограммного обеспечения UEFI процессоров Intel, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 8%
0.00032
Низкий

7.5 High

CVSS3

Уязвимость CVE-2024-29214