CVE-2022-41984 - OpenCVE

Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow a privileged user to potentially enable denial of service via local access.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Intel	Arc A750 Arc A750 Firmware Arc A770 Arc A770 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:intel:arc_a750_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:arc_a750:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:intel:arc_a770_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:arc_a770:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: intel

Published: 2023-08-11T02:36:58.992Z

Updated: 2024-08-03T12:56:39.199Z

Reserved: 2022-10-12T03:00:03.781Z

Link: CVE-2022-41984

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-08-11T03:15:15.307

Modified: 2023-11-07T03:53:10.973

Link: CVE-2022-41984

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:arc_a750_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "720400DE-6327-473C-B50B-AB9477912723", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:arc_a750:-:*:*:*:*:*:*:*", "matchCriteriaId": "E92E63D9-B5E9-49F7-B96F-9C4BE6B8F41C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:arc_a770_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "605707F5-7F3E-4336-A8FA-BCB61AE6E751", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:arc_a770:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE38F333-3BA1-4C84-A311-5DFC90A0BEAA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow a privileged user to potentially enable denial of service via local access."}, {"lang": "es", "value": "El fallo del mecanismo de protecci\u00f3n de algunas tarjetas gr\u00e1ficas Intel(R) Arc(TM) A770 y A750 Limited Edition vendidas entre octubre de 2022 y diciembre de 2022 puede permitir a un usuario con privilegios habilitar potencialmente la denegaci\u00f3n de servicio mediante acceso local."}], "id": "CVE-2022-41984", "lastModified": "2023-11-07T03:53:10.973", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "secure@intel.com", "type": "Secondary"}]}, "published": "2023-08-11T03:15:15.307", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-693"}], "source": "secure@intel.com", "type": "Secondary"}]}