CVE-2023-34314

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insecure inherited permissions in some Intel(R) Simics Simulator software before version 1.7.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-277 CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-343157.8Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable CVE-2023-343167.5An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attack CVE-2023-343176.5An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18 CVE-2023-343187.8A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of CVE-2023-343197.8The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the head CVE-2023-343210.0Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.CVE-2023-343205.5Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to t CVE-2023-343213.3Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory CVE-2023-343227.8For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. Since Xen itself CVE-2023-343235.5When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possi CVE-2023-343244.9Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an u CVE-2023-343257.8[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] libfsimage