CVE-2023-32272
published 2024-01-19CVE-2023-32272: Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.8th percentile
Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| faad2_project | faad2 | >= 0 < 2.9.1-1ubuntu0.1 | 2.9.1-1ubuntu0.1 |
| faad2_project | faad2 | >= 0 < 2.7-8+deb8u3ubuntu0.1~esm1 | 2.7-8+deb8u3ubuntu0.1~esm1 |
| faad2_project | faad2 | >= 0 < 2.8.0~cvs20150510-1ubuntu0.1+esm1 | 2.8.0~cvs20150510-1ubuntu0.1+esm1 |
| faad2_project | faad2 | >= 0 < 2.8.8-1ubuntu0.1~esm1 | 2.8.8-1ubuntu0.1~esm1 |
| intel | nuc_pro_software_suite | <= 3.0.0.6 | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2vwx-chw3-xxm7: Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3
ghsa_unreviewed·2024-01-19
CVE-2023-32272 [HIGH] CWE-427 GHSA-2vwx-chw3-xxm7: Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3
Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access.
OSV
faad2 vulnerabilities
osv·2023-08-29·CVSS 7.8
CVE-2021-32272 faad2 vulnerabilities
faad2 vulnerabilities
It was discovered that FAAD2 incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-32272, CVE-2021-32273, CVE-2021-32274, CVE-2021-32277,
CVE-2021-32278, CVE-2023-38857, CVE-2023-38858)
It was discovered that FAAD2 incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to cause a denial of service.
(CVE-2021-32276)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-01-19
Published