CVE-2024-36293: Medium severity alpine/intel-ucode vulnerability
Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/intel-ucodeto a version that resolves this vulnerability.Fixed in 20250211-r0 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20250211.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20250211.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36293?
CVE-2024-36293 has a severity level that can potentially lead to denial of service if exploited.
How do I fix CVE-2024-36293?
To fix CVE-2024-36293, update to the latest version of the intel-microcode package, specifically version 3.20250211.1 or later.
Who is affected by CVE-2024-36293?
CVE-2024-36293 affects Intel processors that utilize Intel SGX and have improper access control in the EDECCSSA user leaf function.
Can CVE-2024-36293 be exploited remotely?
CVE-2024-36293 necessitates local access for potential exploitation, meaning it cannot be exploited remotely.
What types of systems are vulnerable to CVE-2024-36293?
Vulnerable systems include those running specific versions of the intel-microcode package on Intel processors with SGX.