CVE-2023-28736 Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in Intel SSD Tools Software Two vulnerabilities have been reported in Intel SSD Tools software prior to version mdadm-4.2. CVE-2023-28938 involves uncontrolled resource consumption, while CVE-2023-28736 is related to a buffer overflow. Both vulnerabilities were published on August 11, 2023, affecting users of the affected software versions. 2 sources 51