CVE-2023-38570

HIGH 7.8CVE-2023-38570 · Published 14/11/2023 · updated 17/06/2026

In short

CVE-2023-38570 is a HIGH (CVSS 7.8) vulnerability affecting unison software (intel).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 14.4% of all vulnerabilities.
Fix: update to 20.14.2.3053, 20.14.4244, 20.14.5683.0 or later.

Package	Affected versions	Patched versions
unison software intel	`< 20.14.2.3053< 20.14.4244< 20.14.5683.0`	`20.14.2.305320.14.424420.14.5683.0`

Description

Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html · Vendor Advisory

More vulnerabilities in unison software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unison software

intel

< 20.14.2.3053< 20.14.4244< 20.14.5683.0

20.14.2.305320.14.424420.14.5683.0

More vulnerabilities in unison software

See all →