Every CVE Search/ Get API key

CVE-2023-34440

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged...

8.7 HighFix available

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.25%Up 0.2 points since Feb 13, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.7

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Record
CVE-2023-34440
CVSS 4.0
8.7 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2023-38516 8.7

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Record
EUVD-2023-38516
CVSS 4.0
8.7 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-474w-fcfg-344q 8.7

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged...

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Record
GHSA-474w-fcfg-344q
CVSS 4.0
8.7 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
NVD 8.7

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Record
CVE-2023-34440
CVSS 4.0
8.7 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2023-34440 7.5
Record
BELL-CVE-2023-34440
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-34440 8.7

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Record
DEBIAN-CVE-2023-34440
CVSS 4.0
8.7 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 15 moreShow less
OSVOESA-2025-1171 8.2

microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs.

Security Fix(es):

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-34440)

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2023-43758)

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.(CVE-2024-24582)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-28047)

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-28127)

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.(CVE-2024-29214)

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.(CVE-2024-31068)

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.(CVE-2024-31157)

Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.(CVE-2024-36293)

Sequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable denial of service via local access.(CVE-2024-37020)

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.(CVE-2024-39279)

Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.(CVE-2024-39355)

Record
OESA-2025-1171
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2025:2428 8.2

Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update

Record
RHBA-2025:2428
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2025:2991 8.2

Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update

Record
RHBA-2025:2991
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2418 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2418
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2419 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2419
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2420 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2420
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2421 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2421
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2422 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2422
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2423 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2423
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2424 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2424
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:2427 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:2427
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:3114 8.2

Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

Record
RHEA-2025:3114
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-34440 8.7

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Record
UBUNTU-CVE-2023-34440
CVSS 4.0
8.7 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2025-1745052473 No score

microcode_ctl: Fix of 5 CVEs

  • Update Intel CPU microcode to 20250211 release, addresses: CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28127, CVE-2024-29214 (INTEL-SA-01139):
    • Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0;
    • Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620;
    • Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38;
    • Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436;
    • Addition of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) at revision 0x3000330;
    • Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c;
    • Addition of cpuid:B0674/0x32 microcode (in microcode.dat) at revision 0x12c;
    • Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124;
    • Addition of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) at revision 0x1c;
    • Addition of cpuid:B06F6/0x07 microcode (in microcode.dat) at revision 0x38;
    • Addition of cpuid:B06F7/0x07 microcode (in microcode.dat) at revision 0x38;
    • Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291;
    • Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000290;
    • Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000390;
    • Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0004d0;
    • Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0005c0;
    • Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000290;
    • Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000390;
    • Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0004d0;
    • Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0005c0;
    • Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000290;
    • Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000390;
    • Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0004d0;
    • Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0005c0;
    • Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0004d0;
    • Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0005c0;
    • Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000290;
    • Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000390;
    • Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0004d0;
    • Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0005c0;
    • Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x35;
    • Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x433;
    • Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x123;
    • Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4121;
    • Removal of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at revision 0x4121;
    • Removal of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision 0x4121;
    • Removal of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) at revision 0x17;
    • Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000230;
    • Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision…
Record
CLSA-2025-1745052473
Updated
2026-11-02
OSV No score

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Record
CVE-2023-34440
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
intel-ucode
Alpaquita:23
 20230516a-r0 up to 20250211-r0
20250211-r0
intel-ucode
Alpaquita:stream
 20230214-r0 up to 20250211-r0
20250211-r0
microcode_ctl
TuxCare:AlmaLinux:9.2
From an advisory covering 5 CVEs
 before 4:20220809-2.20250211.1.el9_2.tuxcare.els1
4:20220809-2.20250211.1.el9_2.tuxcare.els1
intel-microcode
Debian:12
 before 3.20250211.1~deb12u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20250211.1~deb12u1
intel-microcode
Debian:13
 before 3.20250211.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20250211.1
intel-microcode
Debian:14
 before 3.20250211.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20250211.1
intel-microcode
Debian:11
From an advisory covering 12 CVEs
 before 3.20250211.1~deb11u1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20250211.1~deb11u1
microcode_ctl
openEuler:20.03-LTS-SP4
From an advisory covering 12 CVEs
 before 20250211-1.oe2003sp4
20250211-1.oe2003sp4
microcode_ctl
openEuler:22.03-LTS-SP3
From an advisory covering 12 CVEs
 before 20250211-1.oe2203sp3
20250211-1.oe2203sp3
microcode_ctl
openEuler:22.03-LTS-SP4
From an advisory covering 12 CVEs
 before 20250211-1.oe2203sp4
20250211-1.oe2203sp4
Show 19 moreShow less
Affected packages
PackageAffectedFixed
microcode_ctl
openEuler:24.03-LTS
From an advisory covering 12 CVEs
 before 20250211-1.oe2403sp1
20250211-1.oe2403sp1
microcode_ctl
openEuler:24.03-LTS-SP1
From an advisory covering 12 CVEs
 before 20250211-1.oe2403sp1
20250211-1.oe2403sp1
microcode_ctl
Red Hat:rhel_aus:7.7::server
From an advisory covering 5 CVEs
 before 2:2.1-53.25.el7_7.1
2:2.1-53.25.el7_7.1
microcode_ctl-debuginfo
Red Hat:rhel_aus:7.7::server
From an advisory covering 5 CVEs
 before 2:2.1-53.25.el7_7.1
2:2.1-53.25.el7_7.1
microcode_ctl
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 4:20240910-1.20250211.1.el9_5
4:20240910-1.20250211.1.el9_5
microcode_ctl
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 5 CVEs
 before 4:20230808-2.20250211.1.el9_4
4:20230808-2.20250211.1.el9_4
microcode_ctl
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 5 CVEs
 before 4:20220207-1.20250211.1.el9_0
4:20220207-1.20250211.1.el9_0
microcode_ctl
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 5 CVEs
 before 4:20220809-2.20250211.1.el9_2
4:20220809-2.20250211.1.el9_2
microcode_ctl
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 5 CVEs
 before 4:20220809-2.20250211.1.el8_8
4:20220809-2.20250211.1.el8_8
microcode_ctl
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 5 CVEs
 before 4:20220207-1.20250211.1.el8_6
4:20220207-1.20250211.1.el8_6
microcode_ctl
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 5 CVEs
 before 4:20220207-1.20250211.1.el8_6
4:20220207-1.20250211.1.el8_6
microcode_ctl
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 5 CVEs
 before 4:20220207-1.20250211.1.el8_6
4:20220207-1.20250211.1.el8_6
microcode_ctl
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 5 CVEs
 before 4:20210216-1.20250211.1.el8_4
4:20210216-1.20250211.1.el8_4
microcode_ctl
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 5 CVEs
 before 4:20210216-1.20250211.1.el8_4
4:20210216-1.20250211.1.el8_4
microcode_ctl
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 5 CVEs
 before 4:20210216-1.20250211.1.el8_4
4:20210216-1.20250211.1.el8_4
microcode_ctl
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 5 CVEs
 before 4:20191115-4.20250211.1.el8_2
4:20191115-4.20250211.1.el8_2
microcode_ctl
Red Hat:rhel_els:7
From an advisory covering 5 CVEs
 before 2:2.1-73.23.el7_9
2:2.1-73.23.el7_9
microcode_ctl-debuginfo
Red Hat:rhel_els:7
From an advisory covering 5 CVEs
 before 2:2.1-73.23.el7_9
2:2.1-73.23.el7_9
microcode_ctl
Red Hat:enterprise_linux:8::baseos
From an advisory covering 10 CVEs
 before 4:20250211-1.el8_10
4:20250211-1.el8_10

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-34440 is a high vulnerability (CVSS 8.7) in intel-ucode, published February 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 17th percentile. Fixed in intel-ucode 20250211-r0.

References

Show 70 moreShow less
This page doesn't list everything

Left out here: 585 versions and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open