Buffer overflow in Intel Optimization for TensorFlow software - CVE-2023-27506

 

Buffer overflow in Intel Optimization for TensorFlow software - CVE-2023-27506

Published: August 11, 2023


Vulnerability identifier: #VU79379
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-27506
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.


Affected software

Intel Optimization for TensorFlow software
IBM Watson Discovery for IBM Cloud Pak for Data

How to mitigate CVE-2023-27506

Install updates from vendor's website.

Intel Optimization for TensorFlow software - update to 2.12
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.7.0

External References

Related Security Bulletins