CVE-2023-46836

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Jan 5, 2024
Updated: Jan 11, 2024

Summary

CVE-2023-46836 is a vulnerability that affects multiple products, including f3iFOP, cJ39PY, and f3iFOO. The vulnerability arises due to the lack of IRQ safety in the fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative Return Stack Overflow). The mitigations for these fixes do not operate together by default, creating a race condition that allows a malicious PV guest to bypass protections and launch an attack against Xen. The vulnerability has a medium severity rating and a base score of 4.7 according to NIST. It poses a high risk to the confidentiality of an organization's data. There is no requirement for user interaction, and the attack vector is local. Remediation measures have not been provided in the given information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-46836 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options