MEDIUM · 4.4

CVE-2021-0083

Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access.

Vulnerability Description

Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
IntelOptane Persistent Memory Firmware< 2.2.0.1547
IntelXeon Gold 5315Y-
IntelXeon Gold 5317-
IntelXeon Gold 5318H-
IntelXeon Gold 5318N-
IntelXeon Gold 5318S-
IntelXeon Gold 5318Y-
IntelXeon Gold 5320-
IntelXeon Gold 5320H-
IntelXeon Gold 5320T-
IntelXeon Gold 6312U-
IntelXeon Gold 6314U-
IntelXeon Gold 6326-
IntelXeon Gold 6328H-
IntelXeon Gold 6328Hl-
IntelXeon Gold 6330-
IntelXeon Gold 6330H-
IntelXeon Gold 6330N-
IntelXeon Gold 6334-
IntelXeon Gold 6336Y-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-0083?

CVE-2021-0083 is a vulnerability with a CVSS score of 4.4 (MEDIUM). Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access.

How severe is CVE-2021-0083?

CVE-2021-0083 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-0083?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Optane Persistent Memory Firmware, Intel Xeon Gold 5315Y, Intel Xeon Gold 5317, Intel Xeon Gold 5318H, Intel Xeon Gold 5318N.