CVE-2023-42667: High severity debian/intel-microcode vulnerability
Published Aug 14, 2024
·Updated
Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
1 affected componentFixes available
debian/intel-microcode<=3.20231114.1~deb11u1, <=3.20231114.1~deb12u1
3.20240813.1~deb11u13.20240813.1~deb12u13.20240813.2
Remediation
Event History
Aug 14, 2024
CVE Published
via MITRE·01:45 PM
Data Sourced
via MITRE·01:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Sep 17, 2024
Data Sourced
via Ubuntu·12:19 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-42667?
CVE-2023-42667 has a moderate severity level as it may allow privilege escalation for authenticated users.
2
How do I fix CVE-2023-42667?
To fix CVE-2023-42667, ensure to update the 'intel-microcode' package to the recommended version or later.
3
Who is affected by CVE-2023-42667?
CVE-2023-42667 affects systems running specific versions of the Intel(R) Core(TM) Ultra Processor with outdated microcode.
4
What kind of access is required to exploit CVE-2023-42667?
Exploitation of CVE-2023-42667 requires local access by an authenticated user.
5
What type of vulnerability is CVE-2023-42667 classified as?
CVE-2023-42667 is classified as an improper isolation vulnerability.