CVE-2024-24582 — Improper Input Validation in Intel-microcode

CWE-20 — Improper Input Validation5 documents5 sources
Severity
8.7HIGHNVD
EPSS
0.0%
top 96.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Intel-microcode
Timeline
PublishedFeb 12
Latest updateFeb 13

Description

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected Packages1 packages

▶debiandebian/intel-microcode< intel-microcode 3.20250211.1~deb12u1 (bookworm)

🔴Vulnerability Details

2
GHSA
GHSA-g5pm-xmgf-pjcq: Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation↗2025-02-13
▶
OSV
CVE-2024-24582: Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation↗2025-02-12
▶

📋Vendor Advisories

2
Red Hat
microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware↗2025-02-12
▶
Debian
CVE-2024-24582: intel-microcode - Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) ...↗2024
▶