CVE-2024-21808 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.2 MEDIUM	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 8.52%

Debian Releases

Debian Product

Codename

intel-mediasdk

bookworm	ignored
bullseye	vulnerable

onevpl-intel-gpu

bookworm	ignored
forky	26.1.2-1.1 fixed
sid	26.1.2-1.1 fixed
trixie	25.1.4-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

intel-mediasdk

focal	ignored
jammy	needs-triage
noble	needs-triage
oracular	ignored
plucky	dne
questing	dne
resolute	dne

onevpl-intel-gpu

focal	dne
jammy	needs-triage
noble	needs-triage
oracular	not-affected
plucky	not-affected
questing	not-affected
resolute	not-affected

Common Weakness Enumeration

CWE-92 - DEPRECATED: Improper Sanitization of Custom Special Characters
This entry has been deprecated. It originally came from PLOVER, which sometimes defined "other" and "miscellaneous" categories in order to satisfy exhaustiveness requirements for taxonomies. Within the context of CWE, the use of a more abstract entry is preferred in mapping situations. CWE-75 is a more appropriate mapping.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01131.html