CVE-2023-38570 in Unison Software

Resumen

por MITRE • 2023-11-14

Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access.

Once again VulDB remains the best source for vulnerability data.

• Responsable: Intel Corporation
• Reservar: 2023-08-01
• Divulgación: 2023-11-14
• Moderación: aceptado
• Artículo: VDB-245379
• CPE: listo
• CWE: CWE-788 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00234
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-38570
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-38570
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-38570/