CVE-2023-20515

MEDIUM Year: 2023
CVSS v3 Score
5.7
Medium
Weakness Type
CWE-1284
View all →

Vulnerability Description

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.

Related Vulnerabilities

CVE-2021-0934

MEDIUM
CVSS:5.5(Medium)

In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. Us...

CWE-12842021

CVE-2021-39690

MEDIUM
CVSS:5.5(Medium)

In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper input validation. This could lead to local denial of service with no additional ...

CWE-12842021

CVE-2022-23319

MEDIUM
CVSS:5.5(Medium)

A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the ...

CWE-12842022

CVE-2022-25375

MEDIUM
CVSS:5.5(Medium)

An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain ...

CWE-12842022

CVE-2023-22409

MEDIUM
CVSS:5.5(Medium)

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service (DoS). When an ...

CWE-12842023

CVE-2023-27941

MEDIUM
CVSS:5.5(Medium)

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be a...

CWE-12842023