{"id":"CVE-2023-22313","aliases":["EUVD-2023-26476","GHSA-frwx-7gqv-hj3w","SUSE-SU-2024:3558-1"],"status":"published","title":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may...","description":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.","severity":{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00215,"percentile":0.11982,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-92"],"published":"2023-11-14T19:05:14Z","modified":"2026-10-24T10:30:50Z","products":[{"vendor":"intel","product":"qat_driver_firmware"},{"vendor":"intel","product":"quickassist_technology_driver_firmware"},{"vendor":"intel","product":"quickassist_technology_library"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.html","tags":["x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22313"},{"url":"https://github.com/advisories/GHSA-frwx-7gqv-hj3w"},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243558-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217158","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-22313","description":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2023-11-14T19:05:14.351Z","modified":"2024-08-02T10:07:06.137Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-92"],"updated_at":"2026-11-02T14:35:15.779187Z"}],"euvd":[{"id":"EUVD-2023-26476","description":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2023-11-14T19:05:14Z","modified":"2024-08-02T10:07:06Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T03:50:07.959006Z"}],"ghsa":[{"id":"GHSA-frwx-7gqv-hj3w","title":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may...","description":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2023-11-14T21:31:01Z","modified":"2023-11-27T21:30:55Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:55:06.860566Z"}],"nvd":[{"id":"CVE-2023-22313","description":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2023-11-14T19:15:17.03Z","modified":"2026-06-17T05:35:01.36Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-92","CWE-119"],"updated_at":"2026-11-02T14:08:46.647045Z"}],"osv":[{"id":"CVE-2023-22313","description":"Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2023-11-14T19:15:17.03Z","modified":"2026-10-24T10:30:50.818040622Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"SUSE-SU-2024:3558-1","title":"Security update for qatlib","description":"This update for qatlib fixes the following issues:\n\n- CVE-2023-22313: Fixed a local information disclosure due to improper\n  buffer restrictions (bsc#1217158).\n","status":"published","published":"2024-10-09T07:26:04Z","modified":"2026-02-04T04:05:14.753128Z","updated_at":"2026-11-02T15:53:55.639015Z"}]}}