PT-2023-9799

CVE-2023-45745

·

Published

2023-11-27

·

Updated

2025-03-26

Description by

CVSS 3.1
8.2
High
MetricsAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel(R) TDX module software versions prior to 1.5.05.46.698
Description The issue is related to improper input validation in the Intel(R) TDX module software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could lead to a potential system compromise.
Recommendations For versions prior to 1.5.05.46.698, upgrade the affected component to mitigate the risk. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2024-8656
ALT-PU-2024-8668
MGASA-2024-0207
OESA-2024-1730
OESA-2024-1731
OESA-2024-1732
OESA-2024-1753
OPENSUSE-SU-2024:13974-1
SUSE-SU-2024:1684-1
SUSE-SU-2024:1771-1
SUSE-SU-2025:1032-1
SUSE-SU-2025:20020-1
USN-6797-1
Found an issue in the description? Have something to add? Feel free to write us 👾