Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-29523 (GCVE-0-2022-29523)
Vulnerability from cvelistv5 – Published: 2023-02-16 20:00 – Updated: 2025-01-27 18:15
VLAI
EPSS
Summary
Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- denial of service
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Open CAS software maintained by Intel(R) |
Affected:
before version 22.3.1
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:26:06.241Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html",
"tags": [
"x_transferred"
],
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2022-29523",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-27T17:28:03.099253Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-27T18:15:30.931Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Open CAS software maintained by Intel(R)",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "before version 22.3.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "denial of service",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-16T20:00:20.422Z",
"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"shortName": "intel"
},
"references": [
{
"name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html",
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
"assignerShortName": "intel",
"cveId": "CVE-2022-29523",
"datePublished": "2023-02-16T20:00:20.422Z",
"dateReserved": "2022-06-09T05:41:11.435Z",
"dateUpdated": "2025-01-27T18:15:30.931Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-29523",
"date": "2026-06-07",
"epss": "0.00051",
"percentile": "0.16229"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:open_cas_project:open_cas:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"22.3.1\", \"matchCriteriaId\": \"975AC94B-FB08-4927-89F3-CFEBD19920A9\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.\"}]",
"id": "CVE-2022-29523",
"lastModified": "2024-11-21T06:59:15.233",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@intel.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\", \"baseScore\": 3.3, \"baseSeverity\": \"LOW\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 1.4}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
"published": "2023-02-16T21:15:11.960",
"references": "[{\"url\": \"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html\", \"source\": \"secure@intel.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "secure@intel.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-754\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-29523\",\"sourceIdentifier\":\"secure@intel.com\",\"published\":\"2023-02-16T21:15:11.960\",\"lastModified\":\"2024-11-21T06:59:15.233\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@intel.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":3.3,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.8,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-754\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open_cas_project:open_cas:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"22.3.1\",\"matchCriteriaId\":\"975AC94B-FB08-4927-89F3-CFEBD19920A9\"}]}]}],\"references\":[{\"url\":\"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html\",\"source\":\"secure@intel.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CERTFR-2023-AVI-0127
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Intel. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité, une élévation de privilèges, un déni de service et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Intel | N/A | Intel Distribution pour le langage de programmation Python versions antérieures à 2022.1 | ||
| Intel | N/A | Intel SUR versions antérieures à 2.4.8902 | ||
| Intel | N/A | Intel Trace Analyzer and Collector versions antérieures à 2021.5 | ||
| Intel | N/A | Intel DSA versions antérieures à 22.4.26 | ||
| Intel | N/A | Intel oneAPI DPC++/C++ Compiler Runtime versions antérieures à 2022.0 | ||
| Intel | N/A | Les processeurs Intel dont la liste est mentionnée dans les liens des fabriquants de la section Documentation. | ||
| Intel | N/A | Intel OpenBMC versions antérieures à 0.72 | ||
| Intel | N/A | Micrologiciel Intel BMC versions antérieures à 2.86 | ||
| Intel | N/A | Intel CVAT versions antérieures à 2.0.1 | ||
| Intel | N/A | Les pilotes Intel Ethernet 500 Series Controller pour VMWare versions antérieures à 1.10.0.13 | ||
| Intel | N/A | Intel FPGA Add-on pour Intel oneAPI Toolkits versions antérieures à 2022.2 | ||
| Intel | N/A | Intel oneAPI Collective Communications Library (oneCCL) versions antérieures à 2021.6 | ||
| Intel | N/A | Intel oneAPI Data Analytics Library versions antérieures à 2021.5 | ||
| Intel | N/A | Intel Integrated Sensor Solution versions antérieures à 5.4.1.4479 | ||
| Intel | N/A | Intel C++ Compiler Classic versions antérieures à 2021.6 | ||
| Intel | N/A | Intel oneAPI Toolkits versions antérieures à 2022.2 | ||
| Intel | N/A | Intel Media SDK versions antérieures à 22.2.2 | ||
| Intel | N/A | Micrologiciel Intel BMC versions antérieures à 2.78 | ||
| Intel | N/A | Intel FCS server versions antérieures à 1.1.79.3 | ||
| Intel | N/A | Intel oneAPI DPC++/C++ Compiler versions antérieures à 2022.1 | ||
| Intel | N/A | Intel oneAPI Deep Neural Network (oneDNN) versions antérieures à 2022.1 | ||
| Intel | N/A | Intel Integrated Sensor Solution versions antérieures à 5.4.2.4579v3 | ||
| Intel | N/A | Intel Battery Life Diagnostic Tool versions antérieures à 2.2.0 | ||
| Intel | N/A | Les pilotes Intel Iris Xe MAX pour Windows versions antérieures à 100.0.5.1474 | ||
| Intel | N/A | Intel OpenBMC versions antérieures à egs-0.91-179 | ||
| Intel | N/A | Intel OFU versions antérieures à 14.1.28 | ||
| Intel | N/A | Intel MPI Library pour Intel oneAPI HPC Toolkit versions antérieures à 2021.6 | ||
| Intel | N/A | Intel Quartus Prime Pro edition versions antérieures à 22.2 | ||
| Intel | N/A | Intel Integrated Sensor Solution versions antérieures à 5.0.0.4143 | ||
| Intel | N/A | Intel E810 Ethernet Controllers and Adapters versions antérieures à 1.7.0.8 | ||
| Intel | N/A | Intel OpenBMC versions antérieures à wht-1.01-61 | ||
| Intel | N/A | Les pilotes Intel QAT pour Linux versions antérieures à 4.17 | ||
| Intel | N/A | Intel QATzip versions antérieures à 1.0.9 | ||
| Intel | N/A | Intel Administrative Tools pour Intel Network Adapters versions antérieures à 27.3 | ||
| Intel | N/A | Intel Quartus Prime Standard Edition versions antérieures à 21.1 | ||
| Intel | N/A | Intel SGX SDK software pour Linux versions antérieures à 2.16.100.1 | ||
| Intel | N/A | Intel Open CAS versions antérieures à 22.3.1 | ||
| Intel | N/A | Intel Quartus Prime Pro Edition versions antérieures à 21.3 | ||
| Intel | N/A | Intel EMA versions antérieures à 1.8.1.0 | ||
| Intel | N/A | Micrologiciel Intel BMC versions antérieures à 2.09 | ||
| Intel | N/A | Les applications Android Intel ON Event Series versions antérieures à 2.0 | ||
| Intel | N/A | Intel SGX SDK software pour Windows versions antérieures à 2.15.100.1 | ||
| Intel | N/A | Intel Quartus Prime Standard edition versions antérieures à 22.1STD | ||
| Intel | N/A | Intel 700 Series Ethernet Controllers and Adapters versions antérieures à 9.101 | ||
| Intel | N/A | Intel Non-Volatile Memory (NVM) Update Utility pour Intel Ethernet Network Adapter E810 Series versions antérieures à 4.01 | ||
| Intel | N/A | Intel SPS firmware versions antérieures à SPS_E3_06.00.03.300.0 | ||
| Intel | N/A | Intel oneapi-cli pour Intel oneAPI Toolkits versions antérieures à 0.2.0 | ||
| Intel | N/A | Intel Crypto API Toolkit pour Intel SGX versions antérieures à 2.0 ID commit 91ee496 | ||
| Intel | N/A | Les pilotes Intel QAT pour Windows versions antérieures à 1.6 | ||
| Intel | N/A | Intel SPS firmware versions antérieures à SPS_E5_04.04.04.300.0 | ||
| Intel | N/A | Intel FPGA SDK pour OpenCL Pro Edition versions antérieures à 22.1 | ||
| Intel | N/A | Les pilotes Intel Ethernet Controller Administrative Tools pour Windows versions antérieures à 1.5.0.2 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Intel Distribution pour le langage de programmation Python versions ant\u00e9rieures \u00e0 2022.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SUR versions ant\u00e9rieures \u00e0 2.4.8902",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Trace Analyzer and Collector versions ant\u00e9rieures \u00e0 2021.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel DSA versions ant\u00e9rieures \u00e0 22.4.26",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI DPC++/C++ Compiler Runtime versions ant\u00e9rieures \u00e0 2022.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les processeurs Intel dont la liste est mentionn\u00e9e dans les liens des fabriquants de la section Documentation.",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 0.72",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.86",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel CVAT versions ant\u00e9rieures \u00e0 2.0.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel Ethernet 500 Series Controller pour VMWare versions ant\u00e9rieures \u00e0 1.10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel FPGA Add-on pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Collective Communications Library (oneCCL) versions ant\u00e9rieures \u00e0 2021.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Data Analytics Library versions ant\u00e9rieures \u00e0 2021.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.1.4479",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel C++ Compiler Classic versions ant\u00e9rieures \u00e0 2021.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Media SDK versions ant\u00e9rieures \u00e0 22.2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.78",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel FCS server versions ant\u00e9rieures \u00e0 1.1.79.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI DPC++/C++ Compiler versions ant\u00e9rieures \u00e0 2022.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Deep Neural Network (oneDNN) versions ant\u00e9rieures \u00e0 2022.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.2.4579v3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Battery Life Diagnostic Tool versions ant\u00e9rieures \u00e0 2.2.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel Iris Xe MAX pour Windows versions ant\u00e9rieures \u00e0 100.0.5.1474",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 egs-0.91-179",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OFU versions ant\u00e9rieures \u00e0 14.1.28",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel MPI Library pour Intel oneAPI HPC Toolkit versions ant\u00e9rieures \u00e0 2021.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Pro edition versions ant\u00e9rieures \u00e0 22.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.0.0.4143",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel E810 Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 1.7.0.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 wht-1.01-61",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel QAT pour Linux versions ant\u00e9rieures \u00e0 4.17",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel QATzip versions ant\u00e9rieures \u00e0 1.0.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Administrative Tools pour Intel Network Adapters versions ant\u00e9rieures \u00e0 27.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Standard Edition versions ant\u00e9rieures \u00e0 21.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SGX SDK software pour Linux versions ant\u00e9rieures \u00e0 2.16.100.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Open CAS versions ant\u00e9rieures \u00e0 22.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Pro Edition versions ant\u00e9rieures \u00e0 21.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel EMA versions ant\u00e9rieures \u00e0 1.8.1.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.09",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les applications Android Intel ON Event Series versions ant\u00e9rieures \u00e0 2.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SGX SDK software pour Windows versions ant\u00e9rieures \u00e0 2.15.100.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Standard edition versions ant\u00e9rieures \u00e0 22.1STD",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel 700 Series Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 9.101",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Non-Volatile Memory (NVM) Update Utility pour Intel Ethernet Network Adapter E810 Series versions ant\u00e9rieures \u00e0 4.01",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E3_06.00.03.300.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneapi-cli pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 0.2.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Crypto API Toolkit pour Intel SGX versions ant\u00e9rieures \u00e0 2.0 ID commit 91ee496",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel QAT pour Windows versions ant\u00e9rieures \u00e0 1.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E5_04.04.04.300.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel FPGA SDK pour OpenCL Pro Edition versions ant\u00e9rieures \u00e0 22.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel Ethernet Controller Administrative Tools pour Windows versions ant\u00e9rieures \u00e0 1.5.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-34346",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34346"
},
{
"name": "CVE-2022-26840",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26840"
},
{
"name": "CVE-2022-29514",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29514"
},
{
"name": "CVE-2022-32971",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32971"
},
{
"name": "CVE-2021-33104",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33104"
},
{
"name": "CVE-2022-33972",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33972"
},
{
"name": "CVE-2022-21163",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21163"
},
{
"name": "CVE-2022-32575",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32575"
},
{
"name": "CVE-2022-26421",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26421"
},
{
"name": "CVE-2022-30539",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30539"
},
{
"name": "CVE-2022-33964",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33964"
},
{
"name": "CVE-2022-29523",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29523"
},
{
"name": "CVE-2022-36348",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36348"
},
{
"name": "CVE-2022-36369",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36369"
},
{
"name": "CVE-2022-34157",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34157"
},
{
"name": "CVE-2022-26345",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26345"
},
{
"name": "CVE-2022-25992",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25992"
},
{
"name": "CVE-2022-26888",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26888"
},
{
"name": "CVE-2022-30339",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30339"
},
{
"name": "CVE-2022-34864",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34864"
},
{
"name": "CVE-2022-26032",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26032"
},
{
"name": "CVE-2021-39295",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39295"
},
{
"name": "CVE-2022-30692",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30692"
},
{
"name": "CVE-2022-36398",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36398"
},
{
"name": "CVE-2022-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30704"
},
{
"name": "CVE-2022-35729",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35729"
},
{
"name": "CVE-2022-26425",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26425"
},
{
"name": "CVE-2022-41314",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41314"
},
{
"name": "CVE-2022-36397",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36397"
},
{
"name": "CVE-2022-34849",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34849"
},
{
"name": "CVE-2022-25987",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25987"
},
{
"name": "CVE-2022-31476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31476"
},
{
"name": "CVE-2022-36287",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36287"
},
{
"name": "CVE-2022-32231",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32231"
},
{
"name": "CVE-2022-26052",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26052"
},
{
"name": "CVE-2022-21216",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21216"
},
{
"name": "CVE-2022-36289",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36289"
},
{
"name": "CVE-2022-30530",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30530"
},
{
"name": "CVE-2022-26837",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26837"
},
{
"name": "CVE-2022-29493",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29493"
},
{
"name": "CVE-2022-35883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35883"
},
{
"name": "CVE-2022-25905",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25905"
},
{
"name": "CVE-2022-34854",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34854"
},
{
"name": "CVE-2022-33190",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33190"
},
{
"name": "CVE-2022-36794",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36794"
},
{
"name": "CVE-2022-33902",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33902"
},
{
"name": "CVE-2022-37329",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37329"
},
{
"name": "CVE-2022-37340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37340"
},
{
"name": "CVE-2022-26509",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26509"
},
{
"name": "CVE-2022-32764",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32764"
},
{
"name": "CVE-2022-33196",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33196"
},
{
"name": "CVE-2022-27170",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27170"
},
{
"name": "CVE-2022-26076",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26076"
},
{
"name": "CVE-2021-39296",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39296"
},
{
"name": "CVE-2022-34841",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34841"
},
{
"name": "CVE-2022-36797",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36797"
},
{
"name": "CVE-2022-38056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38056"
},
{
"name": "CVE-2022-36416",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36416"
},
{
"name": "CVE-2022-34153",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34153"
},
{
"name": "CVE-2022-32570",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32570"
},
{
"name": "CVE-2022-27808",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27808"
},
{
"name": "CVE-2022-30531",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30531"
},
{
"name": "CVE-2022-26062",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26062"
},
{
"name": "CVE-2022-38090",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38090"
},
{
"name": "CVE-2022-41614",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41614"
},
{
"name": "CVE-2022-29494",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29494"
},
{
"name": "CVE-2022-33892",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33892"
},
{
"name": "CVE-2022-36278",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36278"
},
{
"name": "CVE-2022-26512",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26512"
},
{
"name": "CVE-2022-34843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34843"
},
{
"name": "CVE-2021-0187",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-0187"
},
{
"name": "CVE-2022-36382",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36382"
},
{
"name": "CVE-2022-27234",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27234"
},
{
"name": "CVE-2022-26343",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26343"
},
{
"name": "CVE-2022-33946",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33946"
},
{
"name": "CVE-2022-26841",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26841"
},
{
"name": "CVE-2022-26843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26843"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0127",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eIntel\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un\ncontournement de la politique de s\u00e9curit\u00e9, une \u00e9l\u00e9vation de privil\u00e8ges,\nun d\u00e9ni de service et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00674 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00714 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00700 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00767 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00770 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00751 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00776 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00776.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00728 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00731 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00738 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00726 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00726.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00717 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00733 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00764 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00764.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00762 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00762.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00737 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00761 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00736 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00718 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00718.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00725 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00725.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00754 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00765 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00765.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00677 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00677.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00730 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00739 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00739.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00769 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00727 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00746 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00729 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00750 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00721 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html"
}
]
}
CERTFR-2023-AVI-0127
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Intel. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité, une élévation de privilèges, un déni de service et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Intel | N/A | Intel Distribution pour le langage de programmation Python versions antérieures à 2022.1 | ||
| Intel | N/A | Intel SUR versions antérieures à 2.4.8902 | ||
| Intel | N/A | Intel Trace Analyzer and Collector versions antérieures à 2021.5 | ||
| Intel | N/A | Intel DSA versions antérieures à 22.4.26 | ||
| Intel | N/A | Intel oneAPI DPC++/C++ Compiler Runtime versions antérieures à 2022.0 | ||
| Intel | N/A | Les processeurs Intel dont la liste est mentionnée dans les liens des fabriquants de la section Documentation. | ||
| Intel | N/A | Intel OpenBMC versions antérieures à 0.72 | ||
| Intel | N/A | Micrologiciel Intel BMC versions antérieures à 2.86 | ||
| Intel | N/A | Intel CVAT versions antérieures à 2.0.1 | ||
| Intel | N/A | Les pilotes Intel Ethernet 500 Series Controller pour VMWare versions antérieures à 1.10.0.13 | ||
| Intel | N/A | Intel FPGA Add-on pour Intel oneAPI Toolkits versions antérieures à 2022.2 | ||
| Intel | N/A | Intel oneAPI Collective Communications Library (oneCCL) versions antérieures à 2021.6 | ||
| Intel | N/A | Intel oneAPI Data Analytics Library versions antérieures à 2021.5 | ||
| Intel | N/A | Intel Integrated Sensor Solution versions antérieures à 5.4.1.4479 | ||
| Intel | N/A | Intel C++ Compiler Classic versions antérieures à 2021.6 | ||
| Intel | N/A | Intel oneAPI Toolkits versions antérieures à 2022.2 | ||
| Intel | N/A | Intel Media SDK versions antérieures à 22.2.2 | ||
| Intel | N/A | Micrologiciel Intel BMC versions antérieures à 2.78 | ||
| Intel | N/A | Intel FCS server versions antérieures à 1.1.79.3 | ||
| Intel | N/A | Intel oneAPI DPC++/C++ Compiler versions antérieures à 2022.1 | ||
| Intel | N/A | Intel oneAPI Deep Neural Network (oneDNN) versions antérieures à 2022.1 | ||
| Intel | N/A | Intel Integrated Sensor Solution versions antérieures à 5.4.2.4579v3 | ||
| Intel | N/A | Intel Battery Life Diagnostic Tool versions antérieures à 2.2.0 | ||
| Intel | N/A | Les pilotes Intel Iris Xe MAX pour Windows versions antérieures à 100.0.5.1474 | ||
| Intel | N/A | Intel OpenBMC versions antérieures à egs-0.91-179 | ||
| Intel | N/A | Intel OFU versions antérieures à 14.1.28 | ||
| Intel | N/A | Intel MPI Library pour Intel oneAPI HPC Toolkit versions antérieures à 2021.6 | ||
| Intel | N/A | Intel Quartus Prime Pro edition versions antérieures à 22.2 | ||
| Intel | N/A | Intel Integrated Sensor Solution versions antérieures à 5.0.0.4143 | ||
| Intel | N/A | Intel E810 Ethernet Controllers and Adapters versions antérieures à 1.7.0.8 | ||
| Intel | N/A | Intel OpenBMC versions antérieures à wht-1.01-61 | ||
| Intel | N/A | Les pilotes Intel QAT pour Linux versions antérieures à 4.17 | ||
| Intel | N/A | Intel QATzip versions antérieures à 1.0.9 | ||
| Intel | N/A | Intel Administrative Tools pour Intel Network Adapters versions antérieures à 27.3 | ||
| Intel | N/A | Intel Quartus Prime Standard Edition versions antérieures à 21.1 | ||
| Intel | N/A | Intel SGX SDK software pour Linux versions antérieures à 2.16.100.1 | ||
| Intel | N/A | Intel Open CAS versions antérieures à 22.3.1 | ||
| Intel | N/A | Intel Quartus Prime Pro Edition versions antérieures à 21.3 | ||
| Intel | N/A | Intel EMA versions antérieures à 1.8.1.0 | ||
| Intel | N/A | Micrologiciel Intel BMC versions antérieures à 2.09 | ||
| Intel | N/A | Les applications Android Intel ON Event Series versions antérieures à 2.0 | ||
| Intel | N/A | Intel SGX SDK software pour Windows versions antérieures à 2.15.100.1 | ||
| Intel | N/A | Intel Quartus Prime Standard edition versions antérieures à 22.1STD | ||
| Intel | N/A | Intel 700 Series Ethernet Controllers and Adapters versions antérieures à 9.101 | ||
| Intel | N/A | Intel Non-Volatile Memory (NVM) Update Utility pour Intel Ethernet Network Adapter E810 Series versions antérieures à 4.01 | ||
| Intel | N/A | Intel SPS firmware versions antérieures à SPS_E3_06.00.03.300.0 | ||
| Intel | N/A | Intel oneapi-cli pour Intel oneAPI Toolkits versions antérieures à 0.2.0 | ||
| Intel | N/A | Intel Crypto API Toolkit pour Intel SGX versions antérieures à 2.0 ID commit 91ee496 | ||
| Intel | N/A | Les pilotes Intel QAT pour Windows versions antérieures à 1.6 | ||
| Intel | N/A | Intel SPS firmware versions antérieures à SPS_E5_04.04.04.300.0 | ||
| Intel | N/A | Intel FPGA SDK pour OpenCL Pro Edition versions antérieures à 22.1 | ||
| Intel | N/A | Les pilotes Intel Ethernet Controller Administrative Tools pour Windows versions antérieures à 1.5.0.2 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Intel Distribution pour le langage de programmation Python versions ant\u00e9rieures \u00e0 2022.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SUR versions ant\u00e9rieures \u00e0 2.4.8902",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Trace Analyzer and Collector versions ant\u00e9rieures \u00e0 2021.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel DSA versions ant\u00e9rieures \u00e0 22.4.26",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI DPC++/C++ Compiler Runtime versions ant\u00e9rieures \u00e0 2022.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les processeurs Intel dont la liste est mentionn\u00e9e dans les liens des fabriquants de la section Documentation.",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 0.72",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.86",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel CVAT versions ant\u00e9rieures \u00e0 2.0.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel Ethernet 500 Series Controller pour VMWare versions ant\u00e9rieures \u00e0 1.10.0.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel FPGA Add-on pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Collective Communications Library (oneCCL) versions ant\u00e9rieures \u00e0 2021.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Data Analytics Library versions ant\u00e9rieures \u00e0 2021.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.1.4479",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel C++ Compiler Classic versions ant\u00e9rieures \u00e0 2021.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Media SDK versions ant\u00e9rieures \u00e0 22.2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.78",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel FCS server versions ant\u00e9rieures \u00e0 1.1.79.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI DPC++/C++ Compiler versions ant\u00e9rieures \u00e0 2022.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneAPI Deep Neural Network (oneDNN) versions ant\u00e9rieures \u00e0 2022.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.2.4579v3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Battery Life Diagnostic Tool versions ant\u00e9rieures \u00e0 2.2.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel Iris Xe MAX pour Windows versions ant\u00e9rieures \u00e0 100.0.5.1474",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 egs-0.91-179",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OFU versions ant\u00e9rieures \u00e0 14.1.28",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel MPI Library pour Intel oneAPI HPC Toolkit versions ant\u00e9rieures \u00e0 2021.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Pro edition versions ant\u00e9rieures \u00e0 22.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.0.0.4143",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel E810 Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 1.7.0.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 wht-1.01-61",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel QAT pour Linux versions ant\u00e9rieures \u00e0 4.17",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel QATzip versions ant\u00e9rieures \u00e0 1.0.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Administrative Tools pour Intel Network Adapters versions ant\u00e9rieures \u00e0 27.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Standard Edition versions ant\u00e9rieures \u00e0 21.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SGX SDK software pour Linux versions ant\u00e9rieures \u00e0 2.16.100.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Open CAS versions ant\u00e9rieures \u00e0 22.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Pro Edition versions ant\u00e9rieures \u00e0 21.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel EMA versions ant\u00e9rieures \u00e0 1.8.1.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.09",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les applications Android Intel ON Event Series versions ant\u00e9rieures \u00e0 2.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SGX SDK software pour Windows versions ant\u00e9rieures \u00e0 2.15.100.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Quartus Prime Standard edition versions ant\u00e9rieures \u00e0 22.1STD",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel 700 Series Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 9.101",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Non-Volatile Memory (NVM) Update Utility pour Intel Ethernet Network Adapter E810 Series versions ant\u00e9rieures \u00e0 4.01",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E3_06.00.03.300.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel oneapi-cli pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 0.2.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel Crypto API Toolkit pour Intel SGX versions ant\u00e9rieures \u00e0 2.0 ID commit 91ee496",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel QAT pour Windows versions ant\u00e9rieures \u00e0 1.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E5_04.04.04.300.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Intel FPGA SDK pour OpenCL Pro Edition versions ant\u00e9rieures \u00e0 22.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Les pilotes Intel Ethernet Controller Administrative Tools pour Windows versions ant\u00e9rieures \u00e0 1.5.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-34346",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34346"
},
{
"name": "CVE-2022-26840",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26840"
},
{
"name": "CVE-2022-29514",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29514"
},
{
"name": "CVE-2022-32971",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32971"
},
{
"name": "CVE-2021-33104",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33104"
},
{
"name": "CVE-2022-33972",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33972"
},
{
"name": "CVE-2022-21163",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21163"
},
{
"name": "CVE-2022-32575",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32575"
},
{
"name": "CVE-2022-26421",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26421"
},
{
"name": "CVE-2022-30539",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30539"
},
{
"name": "CVE-2022-33964",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33964"
},
{
"name": "CVE-2022-29523",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29523"
},
{
"name": "CVE-2022-36348",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36348"
},
{
"name": "CVE-2022-36369",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36369"
},
{
"name": "CVE-2022-34157",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34157"
},
{
"name": "CVE-2022-26345",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26345"
},
{
"name": "CVE-2022-25992",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25992"
},
{
"name": "CVE-2022-26888",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26888"
},
{
"name": "CVE-2022-30339",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30339"
},
{
"name": "CVE-2022-34864",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34864"
},
{
"name": "CVE-2022-26032",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26032"
},
{
"name": "CVE-2021-39295",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39295"
},
{
"name": "CVE-2022-30692",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30692"
},
{
"name": "CVE-2022-36398",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36398"
},
{
"name": "CVE-2022-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30704"
},
{
"name": "CVE-2022-35729",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35729"
},
{
"name": "CVE-2022-26425",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26425"
},
{
"name": "CVE-2022-41314",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41314"
},
{
"name": "CVE-2022-36397",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36397"
},
{
"name": "CVE-2022-34849",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34849"
},
{
"name": "CVE-2022-25987",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25987"
},
{
"name": "CVE-2022-31476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31476"
},
{
"name": "CVE-2022-36287",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36287"
},
{
"name": "CVE-2022-32231",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32231"
},
{
"name": "CVE-2022-26052",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26052"
},
{
"name": "CVE-2022-21216",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21216"
},
{
"name": "CVE-2022-36289",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36289"
},
{
"name": "CVE-2022-30530",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30530"
},
{
"name": "CVE-2022-26837",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26837"
},
{
"name": "CVE-2022-29493",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29493"
},
{
"name": "CVE-2022-35883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35883"
},
{
"name": "CVE-2022-25905",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25905"
},
{
"name": "CVE-2022-34854",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34854"
},
{
"name": "CVE-2022-33190",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33190"
},
{
"name": "CVE-2022-36794",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36794"
},
{
"name": "CVE-2022-33902",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33902"
},
{
"name": "CVE-2022-37329",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37329"
},
{
"name": "CVE-2022-37340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37340"
},
{
"name": "CVE-2022-26509",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26509"
},
{
"name": "CVE-2022-32764",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32764"
},
{
"name": "CVE-2022-33196",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33196"
},
{
"name": "CVE-2022-27170",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27170"
},
{
"name": "CVE-2022-26076",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26076"
},
{
"name": "CVE-2021-39296",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39296"
},
{
"name": "CVE-2022-34841",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34841"
},
{
"name": "CVE-2022-36797",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36797"
},
{
"name": "CVE-2022-38056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38056"
},
{
"name": "CVE-2022-36416",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36416"
},
{
"name": "CVE-2022-34153",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34153"
},
{
"name": "CVE-2022-32570",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32570"
},
{
"name": "CVE-2022-27808",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27808"
},
{
"name": "CVE-2022-30531",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30531"
},
{
"name": "CVE-2022-26062",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26062"
},
{
"name": "CVE-2022-38090",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38090"
},
{
"name": "CVE-2022-41614",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41614"
},
{
"name": "CVE-2022-29494",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29494"
},
{
"name": "CVE-2022-33892",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33892"
},
{
"name": "CVE-2022-36278",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36278"
},
{
"name": "CVE-2022-26512",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26512"
},
{
"name": "CVE-2022-34843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34843"
},
{
"name": "CVE-2021-0187",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-0187"
},
{
"name": "CVE-2022-36382",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36382"
},
{
"name": "CVE-2022-27234",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27234"
},
{
"name": "CVE-2022-26343",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26343"
},
{
"name": "CVE-2022-33946",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33946"
},
{
"name": "CVE-2022-26841",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26841"
},
{
"name": "CVE-2022-26843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26843"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0127",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eIntel\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un\ncontournement de la politique de s\u00e9curit\u00e9, une \u00e9l\u00e9vation de privil\u00e8ges,\nun d\u00e9ni de service et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00674 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00714 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00700 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00767 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00770 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00751 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00776 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00776.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00728 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00731 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00738 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00726 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00726.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00717 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00733 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00764 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00764.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00762 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00762.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00737 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00761 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00736 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00718 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00718.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00725 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00725.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00754 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00765 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00765.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00677 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00677.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00730 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00739 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00739.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00769 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00727 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00746 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00729 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00750 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00721 du 14 f\u00e9vrier 2023",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html"
}
]
}
FKIE_CVE-2022-29523
Vulnerability from fkie_nvd - Published: 2023-02-16 21:15 - Updated: 2024-11-21 06:59
Severity
3.3 (Low) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| open_cas_project | open_cas | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:open_cas_project:open_cas:*:*:*:*:*:*:*:*",
"matchCriteriaId": "975AC94B-FB08-4927-89F3-CFEBD19920A9",
"versionEndExcluding": "22.3.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access."
}
],
"id": "CVE-2022-29523",
"lastModified": "2024-11-21T06:59:15.233",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4,
"source": "secure@intel.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2023-02-16T21:15:11.960",
"references": [
{
"source": "secure@intel.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
}
],
"sourceIdentifier": "secure@intel.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-754"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-8F5J-CV86-Q574
Vulnerability from github – Published: 2023-02-16 21:30 – Updated: 2023-03-02 15:30
VLAI
Details
Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.
Severity
5.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2022-29523"
],
"database_specific": {
"cwe_ids": [
"CWE-754"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-02-16T21:15:00Z",
"severity": "MODERATE"
},
"details": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.",
"id": "GHSA-8f5j-cv86-q574",
"modified": "2023-03-02T15:30:18Z",
"published": "2023-02-16T21:30:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29523"
},
{
"type": "WEB",
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2022-29523
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-29523",
"id": "GSD-2022-29523"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-29523"
],
"details": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.",
"id": "GSD-2022-29523",
"modified": "2023-12-13T01:19:41.553465Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@intel.com",
"ID": "CVE-2022-29523",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Open CAS software maintained by Intel(R)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "before version 22.3.1"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access."
}
]
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "denial of service"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html",
"refsource": "MISC",
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:open_cas_project:open_cas:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "22.3.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secure@intel.com",
"ID": "CVE-2022-29523"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-754"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-03-02T14:12Z",
"publishedDate": "2023-02-16T21:15Z"
}
}
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…