CVE-2023-31349: High severity amd uprof vulnerability
Incorrect default permissions in the AMD ?Prof installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Other sources
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-31349?
CVE-2023-31349 has been classified with a high severity level due to the potential for privilege escalation and arbitrary code execution.
What software is affected by CVE-2023-31349?
CVE-2023-31349 affects AMD uProf versions prior to 4.1.424 on Linux, 4.2.816 on FreeBSD, and 4.2.845 on Windows.
How do I fix CVE-2023-31349?
To fix CVE-2023-31349, ensure that the permissions of the AMD μProf installation directory are set correctly and consider updating to the latest version of the software.
What are the consequences of CVE-2023-31349?
If exploited, CVE-2023-31349 can lead to privilege escalation, allowing attackers to execute arbitrary code on the vulnerable system.
Is there a patch available for CVE-2023-31349?
Yes, AMD has released updates that address the vulnerabilities identified in CVE-2023-31349.