Vulnerability in Intel(r) Onevpl Gpu Software
CVE-2023-22840
Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access.
EPSS: 0.001 (20.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- N/a Intel(r) Onevpl Gpu Software — versions before version 22.6.5
Weakness classification (CWE)
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/…
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/…
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/…
Frequently asked questions
- What is CVE-2023-22840?
- CVE-2023-22840 is a low-severity vulnerability in Intel(r) Onevpl Gpu Software, classified under CWE-86. CVSS score: 3.3/10. Published 2023-08-11.
- How severe is CVE-2023-22840?
- Low severity. CVSS v3 base score is 3.3 out of 10.