CVE-2023-46836
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Summary
CVE-2023-46836 is a vulnerability that affects multiple products, including f3iFOP, cJ39PY, and f3iFOO. The vulnerability arises due to the lack of IRQ safety in the fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative Return Stack Overflow). The mitigations for these fixes do not operate together by default, creating a race condition that allows a malicious PV guest to bypass protections and launch an attack against Xen. The vulnerability has a medium severity rating and a base score of 4.7 according to NIST. It poses a high risk to the confidentiality of an organization's data. There is no requirement for user interaction, and the attack vector is local. Remediation measures have not been provided in the given information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions