{
  "affected": [],
  "aliases": [
    "CVE-2022-29523"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-754"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-02-16T21:15:00Z",
    "severity": "MODERATE"
  },
  "details": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.",
  "id": "GHSA-8f5j-cv86-q574",
  "modified": "2023-03-02T15:30:18Z",
  "published": "2023-02-16T21:30:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29523"
    },
    {
      "type": "WEB",
      "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Intel Distribution pour le langage de programmation Python versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SUR versions ant\u00e9rieures \u00e0 2.4.8902",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Trace Analyzer and Collector versions ant\u00e9rieures \u00e0 2021.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel DSA versions ant\u00e9rieures \u00e0 22.4.26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler Runtime versions ant\u00e9rieures \u00e0 2022.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les processeurs Intel dont la liste est mentionn\u00e9e dans les liens des fabriquants de la section Documentation.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 0.72",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.86",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel CVAT versions ant\u00e9rieures \u00e0 2.0.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Ethernet 500 Series Controller pour VMWare versions ant\u00e9rieures \u00e0 1.10.0.13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FPGA Add-on pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Collective Communications Library (oneCCL) versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Data Analytics Library versions ant\u00e9rieures \u00e0 2021.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.1.4479",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel C++ Compiler Classic versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Media SDK versions ant\u00e9rieures \u00e0 22.2.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.78",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FCS server versions ant\u00e9rieures \u00e0 1.1.79.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Deep Neural Network (oneDNN) versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.2.4579v3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Battery Life Diagnostic Tool versions ant\u00e9rieures \u00e0 2.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Iris Xe MAX pour Windows versions ant\u00e9rieures \u00e0 100.0.5.1474",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 egs-0.91-179",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OFU versions ant\u00e9rieures \u00e0 14.1.28",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel MPI Library pour Intel oneAPI HPC Toolkit versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Pro edition versions ant\u00e9rieures \u00e0 22.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.0.0.4143",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel E810 Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 1.7.0.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 wht-1.01-61",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel QAT pour Linux versions ant\u00e9rieures \u00e0 4.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel QATzip versions ant\u00e9rieures \u00e0 1.0.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Administrative Tools pour Intel Network Adapters versions ant\u00e9rieures \u00e0 27.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Standard Edition versions ant\u00e9rieures \u00e0 21.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SGX SDK software pour Linux versions ant\u00e9rieures \u00e0 2.16.100.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Open CAS versions ant\u00e9rieures \u00e0 22.3.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Pro Edition versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel EMA versions ant\u00e9rieures \u00e0 1.8.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.09",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les applications Android Intel ON Event Series versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SGX SDK software pour Windows versions ant\u00e9rieures \u00e0 2.15.100.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Standard edition versions ant\u00e9rieures \u00e0 22.1STD",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel 700 Series Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 9.101",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Non-Volatile Memory (NVM) Update Utility pour Intel Ethernet Network Adapter E810 Series versions ant\u00e9rieures \u00e0 4.01",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E3_06.00.03.300.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneapi-cli pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 0.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Crypto API Toolkit pour Intel SGX versions ant\u00e9rieures \u00e0 2.0 ID commit 91ee496",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel QAT pour Windows versions ant\u00e9rieures \u00e0 1.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E5_04.04.04.300.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FPGA SDK pour OpenCL Pro Edition versions ant\u00e9rieures \u00e0 22.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Ethernet Controller Administrative Tools pour Windows versions ant\u00e9rieures \u00e0 1.5.0.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-34346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34346"
    },
    {
      "name": "CVE-2022-26840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26840"
    },
    {
      "name": "CVE-2022-29514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29514"
    },
    {
      "name": "CVE-2022-32971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32971"
    },
    {
      "name": "CVE-2021-33104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33104"
    },
    {
      "name": "CVE-2022-33972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33972"
    },
    {
      "name": "CVE-2022-21163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21163"
    },
    {
      "name": "CVE-2022-32575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32575"
    },
    {
      "name": "CVE-2022-26421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26421"
    },
    {
      "name": "CVE-2022-30539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30539"
    },
    {
      "name": "CVE-2022-33964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33964"
    },
    {
      "name": "CVE-2022-29523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29523"
    },
    {
      "name": "CVE-2022-36348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36348"
    },
    {
      "name": "CVE-2022-36369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36369"
    },
    {
      "name": "CVE-2022-34157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34157"
    },
    {
      "name": "CVE-2022-26345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26345"
    },
    {
      "name": "CVE-2022-25992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25992"
    },
    {
      "name": "CVE-2022-26888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26888"
    },
    {
      "name": "CVE-2022-30339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30339"
    },
    {
      "name": "CVE-2022-34864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34864"
    },
    {
      "name": "CVE-2022-26032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26032"
    },
    {
      "name": "CVE-2021-39295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-39295"
    },
    {
      "name": "CVE-2022-30692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30692"
    },
    {
      "name": "CVE-2022-36398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36398"
    },
    {
      "name": "CVE-2022-30704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30704"
    },
    {
      "name": "CVE-2022-35729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35729"
    },
    {
      "name": "CVE-2022-26425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26425"
    },
    {
      "name": "CVE-2022-41314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41314"
    },
    {
      "name": "CVE-2022-36397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36397"
    },
    {
      "name": "CVE-2022-34849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34849"
    },
    {
      "name": "CVE-2022-25987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25987"
    },
    {
      "name": "CVE-2022-31476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-31476"
    },
    {
      "name": "CVE-2022-36287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36287"
    },
    {
      "name": "CVE-2022-32231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32231"
    },
    {
      "name": "CVE-2022-26052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26052"
    },
    {
      "name": "CVE-2022-21216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21216"
    },
    {
      "name": "CVE-2022-36289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36289"
    },
    {
      "name": "CVE-2022-30530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30530"
    },
    {
      "name": "CVE-2022-26837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26837"
    },
    {
      "name": "CVE-2022-29493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29493"
    },
    {
      "name": "CVE-2022-35883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35883"
    },
    {
      "name": "CVE-2022-25905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25905"
    },
    {
      "name": "CVE-2022-34854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34854"
    },
    {
      "name": "CVE-2022-33190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33190"
    },
    {
      "name": "CVE-2022-36794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36794"
    },
    {
      "name": "CVE-2022-33902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33902"
    },
    {
      "name": "CVE-2022-37329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37329"
    },
    {
      "name": "CVE-2022-37340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37340"
    },
    {
      "name": "CVE-2022-26509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26509"
    },
    {
      "name": "CVE-2022-32764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32764"
    },
    {
      "name": "CVE-2022-33196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33196"
    },
    {
      "name": "CVE-2022-27170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27170"
    },
    {
      "name": "CVE-2022-26076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26076"
    },
    {
      "name": "CVE-2021-39296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-39296"
    },
    {
      "name": "CVE-2022-34841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34841"
    },
    {
      "name": "CVE-2022-36797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36797"
    },
    {
      "name": "CVE-2022-38056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38056"
    },
    {
      "name": "CVE-2022-36416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36416"
    },
    {
      "name": "CVE-2022-34153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34153"
    },
    {
      "name": "CVE-2022-32570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32570"
    },
    {
      "name": "CVE-2022-27808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27808"
    },
    {
      "name": "CVE-2022-30531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30531"
    },
    {
      "name": "CVE-2022-26062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26062"
    },
    {
      "name": "CVE-2022-38090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38090"
    },
    {
      "name": "CVE-2022-41614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41614"
    },
    {
      "name": "CVE-2022-29494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29494"
    },
    {
      "name": "CVE-2022-33892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33892"
    },
    {
      "name": "CVE-2022-36278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36278"
    },
    {
      "name": "CVE-2022-26512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26512"
    },
    {
      "name": "CVE-2022-34843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34843"
    },
    {
      "name": "CVE-2021-0187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0187"
    },
    {
      "name": "CVE-2022-36382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36382"
    },
    {
      "name": "CVE-2022-27234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27234"
    },
    {
      "name": "CVE-2022-26343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26343"
    },
    {
      "name": "CVE-2022-33946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33946"
    },
    {
      "name": "CVE-2022-26841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26841"
    },
    {
      "name": "CVE-2022-26843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26843"
    }
  ],
  "initial_release_date": "2023-02-15T00:00:00",
  "last_revision_date": "2023-02-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0127",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-02-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eIntel\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un\ncontournement de la politique de s\u00e9curit\u00e9, une \u00e9l\u00e9vation de privil\u00e8ges,\nun d\u00e9ni de service et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00674 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00714 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00700 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00767 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00770 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00751 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00776 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00776.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00728 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00731 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00738 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00726 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00726.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00717 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00733 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00764 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00764.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00762 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00762.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00737 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00761 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00736 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00718 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00718.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00725 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00725.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00754 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00765 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00765.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00677 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00677.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00730 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00739 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00739.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00769 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00727 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00746 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00729 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00750 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00721 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:open_cas_project:open_cas:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "975AC94B-FB08-4927-89F3-CFEBD19920A9",
              "versionEndExcluding": "22.3.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access."
    }
  ],
  "id": "CVE-2022-29523",
  "lastModified": "2024-11-21T06:59:15.233",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4,
        "source": "secure@intel.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-02-16T21:15:11.960",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-754"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2022-29523",
    "id": "GSD-2022-29523"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-29523"
      ],
      "details": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.",
      "id": "GSD-2022-29523",
      "modified": "2023-12-13T01:19:41.553465Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@intel.com",
        "ID": "CVE-2022-29523",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Open CAS software maintained by Intel(R)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "before version 22.3.1"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "denial of service"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html",
            "refsource": "MISC",
            "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:open_cas_project:open_cas:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "22.3.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2022-29523"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-754"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-03-02T14:12Z",
      "publishedDate": "2023-02-16T21:15Z"
    }
  }
}