CVE-2022-43507
10.05.2023, 14:15
Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access.
| Vendor | Product | Version |
|---|---|---|
| intel | quickassist_technology_engine | 𝑥 < 0.6.16 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-92 - DEPRECATED: Improper Sanitization of Custom Special CharactersThis entry has been deprecated. It originally came from PLOVER, which sometimes defined "other" and "miscellaneous" categories in order to satisfy exhaustiveness requirements for taxonomies. Within the context of CWE, the use of a more abstract entry is preferred in mapping situations. CWE-75 is a more appropriate mapping.
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.