CVE-2024-21808: Low severity Intel VPL vulnerability
Improper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/onevpl-intel-gputo a version that resolves this vulnerability.Fixed in 24.3.3-1 - Upgrade
Upgrade
debian/onevpl-intel-gputo a version that resolves this vulnerability.Fixed in 25.1.4-1Fixed in 26.3.3-1 - Upgrade
Upgrade
Intel(R) VPL softwareto a version that resolves this vulnerability.Fixed in 24.1.4
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21808?
CVE-2024-21808 has been rated as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2024-21808?
To mitigate CVE-2024-21808, update your Intel VPL software to version 24.1.4 or later.
Who is affected by CVE-2024-21808?
CVE-2024-21808 affects users of Intel VPL software versions prior to 24.1.4.
What type of vulnerability is CVE-2024-21808?
CVE-2024-21808 is classified as an improper buffer restriction vulnerability.
Can CVE-2024-21808 be exploited remotely?
CVE-2024-21808 requires local access for exploitation, as it affects authenticated users.