CVE catalog

CVE-2023-27517

ipmctl: CVE-2023-27517

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.22% · Oct 25, 2026

Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianipmctlbookworm03.00.00.0468-1vulnerable
Ubuntuipmctl20.0402.00.00.3474+really01.00.00.3469-1vulnerable
Ubuntuipmctl20.0402.00.00.3474+really01.00.00.3481-1vulnerable
Ubuntuipmctl20.0402.00.00.3673+ds-2vulnerable
Ubuntuipmctl20.0402.00.00.3673+ds-3vulnerable
Ubuntuipmctl20.0402.00.00.3709+ds-1vulnerable
Ubuntuipmctl22.0402.00.00.3852+ds-1vulnerable
Ubuntuipmctl22.0402.00.00.3885+ds-1vulnerable
Ubuntuipmctl22.0403.00.00.0423-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianipmctlsourcebookworm(unfixed)not yet assignedNot reportedNot reported

Notes

[bookworm] ipmctl: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References