CVE-2024-23918 - Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access

Back Back to CVE browser

HIGH

Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access

Published Nov 13, 2024

8.8

HIGH

CVSS 4.0

EPSS 0.26%

Description

Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Vendor Intel Product 3rd Generation Intel Xeon Scalable Processor Family Default
n/a
- Version
  606A6
  Status
  affected
  Constraints
  -
Vendor Intel Product 4th Generation Intel Xeon Processor Scalable Family Default
n/a
- Version
  806f7
  Status
  affected
  Constraints
  -
- Version
  806f8
  Status
  affected
  Constraints
  -
Vendor Intel Product 5th Generation Intel Xeon Processor Scalable Family Default
n/a
- Version
  c06f2
  Status
  affected
  Constraints
  -
Vendor Intel Product Xeon D Processor Default
n/a
- Version
  606C1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel

3rd Generation Intel Xeon Scalable Processor Family

n/a

Version	Status	Constraints
606A6	affected	-

Intel

4th Generation Intel Xeon Processor Scalable Family

n/a

Version	Status	Constraints
806f7	affected	-
806f8	affected	-

Intel

5th Generation Intel Xeon Processor Scalable Family

n/a

Version	Status	Constraints
c06f2	affected	-

Intel

Xeon D Processor

n/a

Version	Status	Constraints
606C1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-92

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-21348		Advisory
https://lists.debian.org/debian-lts-announce/2024/12/msg00024.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html