CVEvulnerability
CVE-2023-24478
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-330
Description
Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.
Affected configurations
• intel quartus prime (< 22.4)
Related
Weakness · CWE (1)
- CWE-330 Use of Insufficiently Random Values weakness
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00850.html Patch, Vendor Advisory
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00850.html Patch, Vendor Advisory