CVE Vulnerabilities

CVE-2023-32642

Insufficient Adherence to Expected Conventions

Published: Feb 14, 2024 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Insufficient adherence to expected conventions for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Weakness

The product’s architecture, source code, design, documentation, or other artifact does not follow required conventions.

Affected Software

Name Vendor Start Version End Version
Killer Intel * 3.1423.712 (excluding)
Proset/wireless Intel * 22.240 (excluding)
Linux-firmware Ubuntu bionic *
Linux-firmware Ubuntu mantic *
Linux-firmware Ubuntu trusty *
Linux-firmware Ubuntu trusty/esm *
Linux-firmware Ubuntu xenial *

Extended Description

This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.

References