CVE-2023-28736

Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mdadm_project:mdadm:*:*:*:*:*:*:*:*
cpe:2.3:a:mdadm_project:mdadm:4.2:rc1:*:*:*:*:*:*

History

21 Nov 2024, 07:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 6.7
v2 : unknown
v3 : 5.7
References () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html - Vendor Advisory () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html - Vendor Advisory

25 Sep 2023, 18:30

Type Values Removed Values Added
CPE cpe:2.3:a:mdadm_project:mdadm:4.2:-:*:*:*:*:*:*

21 Aug 2023, 16:51

Type Values Removed Values Added
References (MISC) http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html - (MISC) http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.7
First Time Mdadm Project
Mdadm Project mdadm
CPE cpe:2.3:a:mdadm_project:mdadm:4.2:rc1:*:*:*:*:*:*
cpe:2.3:a:mdadm_project:mdadm:4.2:-:*:*:*:*:*:*
cpe:2.3:a:mdadm_project:mdadm:*:*:*:*:*:*:*:*
CWE CWE-120

11 Aug 2023, 03:44

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-11 03:15

Updated : 2024-11-21 07:55


NVD link : CVE-2023-28736

Mitre link : CVE-2023-28736

CVE.ORG link : CVE-2023-28736


JSON object : View

Products Affected

mdadm_project

  • mdadm
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')