CVE-2024-21823: DoS (CVSS 7.5)

Description

Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local access

Is your site exposed to CVE-2024-21823?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

Weakness Type (CWE)

CWE-1264 CWE-1264

CWE-400 Uncontrolled Resource Consumption

References

Other References

http://www.openwall.com/lists/oss-security/2024/05/15/1 https://lists.fedoraproject.org/archives/list/[email protected]/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ https://lists.fedoraproject.org/archives/list/[email protected]/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01084.html http://www.openwall.com/lists/oss-security/2024/05/15/1 https://lists.fedoraproject.org/archives/list/[email protected]/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ https://lists.fedoraproject.org/archives/list/[email protected]/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01084.html

Frequently Asked Questions

What is CVE-2024-21823? +

Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local access It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2024-21823? +

CVE-2024-21823 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

How do I check if I'm vulnerable to CVE-2024-21823? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2024-21823