[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <ZVPDUJndrHVBadOt@itl-email>
Date: Tue, 14 Nov 2023 13:58:21 -0500
From: Demi Marie Obenour <demi@...isiblethingslab.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2023-23583: Intel - Denial of Service -
Privilege Escalation (Reptar)
On Tue, Nov 14, 2023 at 10:31:51AM -0800, Antonio Gomez Iglesias wrote:
> Name of the issue: Redundant Prefix Issue
>
>
> Description of the issue
> Under certain microarchitectural conditions, Intel has identified cases
> where execution of an instruction (REP MOVSB) encoded with a redundant
> REX prefix may result in unpredictable system behavior resulting in a
> system crash/hang, or, in some limited scenarios, may allow escalation
> of privilege from CPL3 to CPL0.
> This Redundant Prefix Issue is assigned CVE-2023-23583 with a CVSS Base
> Score of 8.8 High CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
>
>
> Mitigation
> Intel is providing a microcode update to mitigate this issue: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20231114
Does this also allow privilege escalation from a VM guest to the host?
What are the limited scenarios?
--
Sincerely,
Demi Marie Obenour (she/her/hers)
Invisible Things Lab
Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
