CVE-2023-23908

Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
intelCNA
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 1%
VendorProductVersion
intelmicrocode
𝑥
< 20230808
debiandebian_linux
10.0
debiandebian_linux
11.0
debiandebian_linux
12.0
intelxeon_d-2745nx_firmware
-
intelxeon_d-2757nx_firmware
-
intelxeon_d-2777nx_firmware
-
intelxeon_d-2798nx_firmware
-
intelxeon_d-1702_firmware
-
intelxeon_d-1712tr_firmware
-
intelxeon_d-1713nt_firmware
-
intelxeon_d-1713nte_firmware
-
intelxeon_d-1714_firmware
-
intelxeon_d-1715ter_firmware
-
intelxeon_d-1718t_firmware
-
intelxeon_d-1722ne_firmware
-
intelxeon_d-1726_firmware
-
intelxeon_d-1732te_firmware
-
intelxeon_d-1733nt_firmware
-
intelxeon_d-1734nt_firmware
-
intelxeon_d-1735tr_firmware
-
intelxeon_d-1736_firmware
-
intelxeon_d-1736nt_firmware
-
intelxeon_d-1739_firmware
-
intelxeon_d-1746ter_firmware
-
intelxeon_d-1747nte_firmware
-
intelxeon_d-1748te_firmware
-
intelxeon_d-1749nt_firmware
-
intelxeon_d-2712t_firmware
-
intelxeon_d-2733nt_firmware
-
intelxeon_d-2738_firmware
-
intelxeon_d-2752nte_firmware
-
intelxeon_d-2752ter_firmware
-
intelxeon_d-2753nt_firmware
-
intelxeon_d-2766nt_firmware
-
intelxeon_d-2775te_firmware
-
intelxeon_d-2776nt_firmware
-
intelxeon_d-2779_firmware
-
intelxeon_d-2786nte_firmware
-
intelxeon_d-2795nt_firmware
-
intelxeon_d-2796nt_firmware
-
intelxeon_d-2796te_firmware
-
intelxeon_d-2798nt_firmware
-
intelxeon_d-2799_firmware
-
intelxeon_d-1602_firmware
-
intelxeon_d-1622_firmware
-
intelxeon_d-1623n_firmware
-
intelxeon_d-1627_firmware
-
intelxeon_d-1633n_firmware
-
intelxeon_d-1637_firmware
-
intelxeon_d-1649n_firmware
-
intelxeon_d-1653n_firmware
-
intelxeon_d-2123it_firmware
-
intelxeon_d-2141i_firmware
-
intelxeon_d-2142it_firmware
-
intelxeon_d-2143it_firmware
-
intelxeon_d-2145nt_firmware
-
intelxeon_d-2146nt_firmware
-
intelxeon_d-2161i_firmware
-
intelxeon_d-2163it_firmware
-
intelxeon_d-2166nt_firmware
-
intelxeon_d-2173it_firmware
-
intelxeon_d-2177nt_firmware
-
intelxeon_d-2183it_firmware
-
intelxeon_d-2187nt_firmware
-
intelxeon_d-1513n_firmware
-
intelxeon_d-1523n_firmware
-
intelxeon_d-1533n_firmware
-
intelxeon_d-1543n_firmware
-
intelxeon_d-1553n_firmware
-
intelxeon_d-1529_firmware
-
intelxeon_d-1539_firmware
-
intelxeon_d-1559_firmware
-
intelxeon_d-1557_firmware
-
intelxeon_d-1567_firmware
-
intelxeon_d-1571_firmware
-
intelxeon_d-1577_firmware
-
intelxeon_d-1518_firmware
-
intelxeon_d-1521_firmware
-
intelxeon_d-1527_firmware
-
intelxeon_d-1528_firmware
-
intelxeon_d-1531_firmware
-
intelxeon_d-1537_firmware
-
intelxeon_d-1541_firmware
-
intelxeon_d-1548_firmware
-
intelxeon_d-1520_firmware
-
intelxeon_d-1540_firmware
-
intelxeon_gold_5315y_firmware
-
intelxeon_gold_5317_firmware
-
intelxeon_gold_5318n_firmware
-
intelxeon_gold_5318s_firmware
-
intelxeon_gold_5318y_firmware
-
intelxeon_gold_5320_firmware
-
intelxeon_gold_5320t_firmware
-
intelxeon_gold_6312u_firmware
-
intelxeon_gold_6314u_firmware
-
intelxeon_gold_6326_firmware
-
intelxeon_gold_6330_firmware
-
intelxeon_gold_6330n_firmware
-
intelxeon_gold_6334_firmware
-
intelxeon_gold_6336y_firmware
-
intelxeon_gold_6338_firmware
-
intelxeon_gold_6338n_firmware
-
intelxeon_gold_6338t_firmware
-
intelxeon_gold_6342_firmware
-
intelxeon_gold_6346_firmware
-
intelxeon_gold_6348_firmware
-
intelxeon_gold_6354_firmware
-
intelxeon_platinum_8351n_firmware
-
intelxeon_platinum_8352m_firmware
-
intelxeon_platinum_8352s_firmware
-
intelxeon_platinum_8352v_firmware
-
intelxeon_platinum_8352y_firmware
-
intelxeon_platinum_8358_firmware
-
intelxeon_platinum_8358p_firmware
-
intelxeon_platinum_8360y_firmware
-
intelxeon_platinum_8362_firmware
-
intelxeon_platinum_8368_firmware
-
intelxeon_platinum_8368q_firmware
-
intelxeon_platinum_8380_firmware
-
intelxeon_silver_4309y_firmware
-
intelxeon_silver_4310_firmware
-
intelxeon_silver_4310t_firmware
-
intelxeon_silver_4314_firmware
-
intelxeon_silver_4316_firmware
-
intelxeon_gold_6330h_firmware
-
intelxeon_platinum_8356h_firmware
-
intelxeon_platinum_8360h_firmware
-
intelxeon_platinum_8360hl_firmware
-
intelxeon_gold_5318h_firmware
-
intelxeon_gold_5320h_firmware
-
intelxeon_gold_6328h_firmware
-
intelxeon_gold_6328hl_firmware
-
intelxeon_gold_6348h_firmware
-
intelxeon_platinum_8353h_firmware
-
intelxeon_platinum_8354h_firmware
-
intelxeon_platinum_8376h_firmware
-
intelxeon_platinum_8376hl_firmware
-
intelxeon_platinum_8380h_firmware
-
intelxeon_platinum_8380hl_firmware
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
intel-microcode
bullseye/non-free
3.20240813.1~deb11u1
fixed
bullseye/non-free (security)
3.20241112.1~deb11u1
fixed
bookworm/non-free-firmware
3.20240910.1~deb12u1
fixed
bookworm/non-free-firmware (security)
3.20231114.1~deb12u1
fixed
sid/non-free-firmware
3.20241112.1
fixed
trixie/non-free-firmware
3.20241112.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
intel-microcode
oracular
Fixed 3.20230808.1
released
noble
Fixed 3.20230808.1
released
mantic
Fixed 3.20230808.1
released
lunar
Fixed 3.20230808.0ubuntu1
released
jammy
Fixed 3.20230808.0ubuntu0.22.04.1
released
focal
Fixed 3.20230808.0ubuntu0.20.04.1
released
bionic
Fixed 3.20230808.0ubuntu0.18.04.1+esm1
released
xenial
Fixed 3.20230808.0ubuntu0.16.04.1+esm1
released
trusty
ignored
Common Weakness Enumeration
References
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html
https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/
https://security.netapp.com/advisory/ntap-20230824-0003/
https://www.debian.org/security/2023/dsa-5474
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html
https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/
https://security.netapp.com/advisory/ntap-20230824-0003/
https://www.debian.org/security/2023/dsa-5474