CVE-2023-45745
High · 7.9CVSS
7.9
EPSS
0.4%
Published
May 16, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
There is not enough information available about this issue to understand what it affects or how to respond.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Theoretical
- Impact
- Full Compromise
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
Insufficient information available; description and affected products are empty, preventing determination of the technical flaw.
Why it matters to the business
Unknown exposure and remediation urgency due to lack of details; no known ransomware use or threat actors listed.
How an attack unfolds
No data provided on the vulnerability, so no exploitation path can be described.
How to fix it
No fixed versions or affected products supplied; monitor official sources for updates.
How to confirm the fix worked
Unable to validate without product or version details; check vendor advisories directly.
How to detect it
No indicators available due to missing description and product context.
What your security team should do
- Await additional CVE details from authoritative sources
- Monitor EPSS and KEV updates for changes in risk
The record
Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.17 | intel-ucode | 0 | 20240813-r0 |
| Alpine:v3.18 | intel-ucode | 0 | 20240813-r0 |
| Alpine:v3.19 | intel-ucode | 0 | 20240514-r0 |
| Alpine:v3.20 | intel-ucode | 0 | 20240514-r0 |
| Alpine:v3.21 | intel-ucode | 0 | 20240514-r0 |
| Alpine:v3.22 | intel-ucode | 0 | 20240514-r0 |
| Debian:11 | intel-microcode | 0 | 3.20240514.1~deb11u1 |
| Debian:12 | intel-microcode | 0 | 3.20240514.1~deb12u1 |
| Debian:13 | intel-microcode | 0 | 3.20240514.1 |
| Debian:14 | intel-microcode | 0 | 3.20240514.1 |
| Mageia:9 | microcode | 0 | 0.20240514-1.mga9.nonfree |
| SUSE:Enterprise Storage 7.1 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Micro 5.1 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Micro 5.2 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Micro 5.3 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Micro 5.4 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Micro 5.5 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | microcode_ctl | 0 | 1.17-102.83.81.1 |
| SUSE:Linux Enterprise Server 12 SP5 | ucode-intel | 0 | 20240514-137.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | ucode-intel | 0 | 20240514-137.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Manager Proxy 4.3 | ucode-intel | 0 | 20240514-150200.41.1 |
| SUSE:Manager Server 4.3 | ucode-intel | 0 | 20240514-150200.41.1 |
| Ubuntu:20.04:LTS | intel-microcode | 0 | 3.20240514.0ubuntu0.20.04.1 |
| Ubuntu:22.04:LTS | intel-microcode | 0 | 3.20240514.0ubuntu0.22.04.1 |
| Ubuntu:23.10 | intel-microcode | 0 | 3.20240514.0ubuntu0.23.10.1 |
| Ubuntu:24.04:LTS | intel-microcode | 0 | 3.20240514.0ubuntu0.24.04.1 |
| Ubuntu:Pro:14.04:LTS | intel-microcode | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | intel-microcode | 0 | 3.20240514.0ubuntu0.16.04.1+esm1 |
| Ubuntu:Pro:18.04:LTS | intel-microcode | 0 | 3.20240514.0ubuntu0.18.04.1+esm1 |
| openSUSE:Leap 15.5 | ucode-intel | 0 | 20240514-150200.41.1 |
| openSUSE:Leap 15.6 | ucode-intel | 0 | 20240514-150200.41.1 |
| openSUSE:Leap Micro 5.3 | ucode-intel | 0 | 20240514-150200.41.1 |
| openSUSE:Leap Micro 5.4 | ucode-intel | 0 | 20240514-150200.41.1 |
| openSUSE:Tumbleweed | ucode-intel | 0 | 20240514-1.1 |
Related vulnerabilities
- CVE-2024-23918 Improper conditions check in some Intel(R) Xeon(R) processor memory controller… Also affects intel-ucode
- CVE-2024-21853 Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th… Also affects intel-ucode
- CVE-2024-24968 Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may… Also affects intel-ucode
- CVE-2024-23984 Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a… Also affects intel-ucode
- CVE-2024-25939 Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable… Also affects intel-ucode
- CVE-2024-24980 Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R)… Also affects intel-ucode
- CVE-2024-24853 Incorrect behavior order in transition between executive monitor and SMI transfer monitor… Also affects intel-ucode
- CVE-2023-49141 Improper isolation in some Intel(R) Processors stream cache mechanism may allow an… Also affects intel-ucode