Heap-based buffer overflow in Intel products - CVE-2023-31276
Published: April 5, 2025
Vulnerability identifier: #VU107015
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2023-31276
CWE-ID: CWE-122
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Intel
Affected software:
Intel Server Board M50CYP
Intel Server Board D50TNP
Intel Server Board S2600WF
Intel Server Board S2600ST
Intel Server Board S2600BP
Intel Server Board M50CYP
Intel Server Board D50TNP
Intel Server Board S2600WF
Intel Server Board S2600ST
Intel Server Board S2600BP
Detailed vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error. A local privileged user can trigger a heap-based buffer overflow and execute arbitrary code with elevated privileges.
How to mitigate CVE-2023-31276
Install updates from vendor's website.