Create Advisory-EGI-SVG-2023-58.md

2023/Advisory-EGI-SVG-2023-58.md

@@ -0,0 +1,75 @@
+---
+title: Advisory-EGI-SVG-2023-58
+permalink: /Advisory-EGI-SVG-2023-58
+redirect_from:
+  - /Advisory-SVG-CVE-2023-23583
+
+published: false
+---
+
+## Advisory-EGI-SVG-2023-58
+
+# 'ALERT' [TLP:CLEAR] Intel processor vulnerability [EGI-SVG-2023-58]
+
+Date:        2023-11-21 
+
+<include title without id in the body of txt of e-mail>
+
+A security vulnerability was found in some Intel processors potentially allowing privilege escalation, information disclosure and/or a denial of service via local access.   [R 1] [R 2]
+
+## IDs AND CVSS SCORE      
+
+EGI SVG ID : EGI-SVG-2023-58
+
+CVE ID     : CVE-2023-23583
+
+CVSS Score : 8.8 [R 1]
+
+
+## ACTIONS REQUIRED/RECOMMENDED
+
+Sites running intel hardware are recommended to look at the announced 
+information and take appropriate action.
+
+If anyone becomes aware of any situation where this vulnerability has a significant impact on the EGI infrastructure then please inform EGI SVG.
+
+See references below for further information, especially [R 3] 
+
+
+## STATUS OF THIS ADVISORY    
+
+_TLP:CLEAR information - Unlimited distribution_
+
+ https://advisories.egi.eu/Advisory-EGI-SVG-2023-58  
+
+ https://advisories.egi.eu/Advisory-SVG-CVE-2023-23583   
+
+Minor updates may be made without re-distribution to the sites.
+
+## CONTACT AND OTHER INFORMATION ON SVG
+
+Comments or questions should be sent to
+	svg-rat at mailman.egi.eu
+
+Vulnerabilities relevant for EGI can be reported at
+	report-vulnerability at egi.eu
+
+(see [R 99] for further details, and other information on SVG)
+
+
+## REFERENCES
+
+- [R 1] <https://nvd.nist.gov/vuln/detail/CVE-2023-23583> 
+
+- [R 2]  <https://access.redhat.com/security/cve/CVE-2023-23583>  
+
+- [R 3] <https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html>
+
+
+- [R 99] <https://confluence.egi.eu/display/EGIBG/SVG+Advisories>
+
+## CREDITS
+
+SVG was alerted to this vulnerability by Barbara Krasovec
+
+