CVE-2023-23583: Intel - Denial of Service - Privilege Escalation (Reptar)
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20231114.1~deb10u1Fixed in 3.20231114.1~deb11u1Fixed in 3.20231114.1~deb12u1Fixed in 3.20231114.1 - Upgrade
Upgrade
F5 F5OSto a version that resolves this vulnerability.Fixed in 1.8.01.5.3
Event History
Frequently Asked Questions
What is CVE-2023-23583?
CVE-2023-23583 is a vulnerability that may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access on certain Intel Processors.
Which Intel processors are affected by CVE-2023-23583?
CVE-2023-23583 affects Intel Sapphire Rapids, Intel Alder Lake, and Intel Raptor Lake processors.
What is the severity of CVE-2023-23583?
CVE-2023-23583 has a severity rating of 8.8 (high).
How can an authenticated user exploit CVE-2023-23583?
An authenticated user can exploit CVE-2023-23583 by executing a sequence of processor instructions that leads to unexpected behavior, potentially enabling escalation of privilege and/or information disclosure and/or denial of service.
Are there any fixes or patches available for CVE-2023-23583?
Yes, Intel has released a security advisory (Intel-SA-00950) with mitigations and updates to address the vulnerability.