Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HIntel Quickassist Technology Engine
APPIntel< 0.6.16
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2017-5681HIGH7.5same product
The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5....
CVE-2021-45046CRITICAL9.0⚠ KEVPL ✓same vendor
Apache Log4j: niekompletna naprawa CVE-2021-44228 — RCE przez JNDI Lookup
CVE-2021-44228CRITICAL10.0⚠ KEVPL ✓same vendor
Apache Log4j2 Log4Shell — RCE przez podatną funkcję JNDI lookup
CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same vendor
Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy
CVE-2024-23497CRITICAL9.3PL ✓same vendor
Out-of-bounds write w sterowniku Linux dla Intel Ethernet 800 Series — privilege escalation