CVE-2023-23583

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1281 CWE-276

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processors	See references

References

http://www.openwall.com/lists/oss-security/2023/11/14/4Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/5Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/6Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/7Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/8Mailing List
http://www.openwall.com/lists/oss-security/2023/11/14/9Mailing List
https://lists.debian.org/debian-lts-announce/2023/12/msg00012.html
https://security.netapp.com/advisory/ntap-20231116-0015/Third Party Advisory
https://www.debian.org/security/2023/dsa-5563Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/4Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/5Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/6Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/7Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/14/8Mailing List
http://www.openwall.com/lists/oss-security/2023/11/14/9Mailing List
https://lists.debian.org/debian-lts-announce/2023/12/msg00012.html
https://security.netapp.com/advisory/ntap-20231116-0015/Third Party Advisory
https://www.debian.org/security/2023/dsa-5563Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.htmlVendor Advisory

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-235844.3An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of CVE-2023-235857.5Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation CVE-2023-235865.5Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls CVE-2023-235886.3A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00 CVE-2023-235896.5The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a proto CVE-2023-23598.8The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload CVE-2023-235907.5Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated CVE-2023-235914.9The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs CVE-2023-235927.5WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information.CVE-2023-235949.8An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724_r2 provides rem CVE-2023-235957.5BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, s CVE-2023-235968.8jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with