CVE-2023-26589

CWE-416 — Use After Free6 documents4 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 82.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Aptio V Uefi Firmware Integrator Tools
Timeline
PublishedNov 14
Latest updateApr 24

Description

Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0

Affected Packages2 packages

▶NVDintel/aptio_v_uefi_firmware_integrator_tools5.27.03.0003, 5.27.06.0017+1

🔴Vulnerability Details

5
OSV
linux-azure-6.5 vulnerabilities↗2024-04-24
▶
OSV
linux-lowlatency-hwe-6.5 vulnerabilities↗2024-04-22
▶
OSV
linux, linux-aws, linux-aws-6.5, linux-azure, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-nvidia-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, lin↗2024-04-19
▶
GHSA
GHSA-wfc8-v3hg-jvrw: Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via↗2023-11-14
▶
CVEList
CVE-2023-26589: Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via↗2023-11-14
▶
CVE-2023-26589 (MEDIUM CVSS 5.5) | Use after free in some Intel(R) Apt | cvebase.io