CVE-2023-27517

Name	CVE-2023-27517
Description	Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ipmctl (PTS)	bullseye	02.00.00.3852+ds-1	vulnerable
	bookworm	03.00.00.0468-1	vulnerable
	sid	03.00.00.0485-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
ipmctl	source	(unstable)	03.00.00.0485-1

Notes

[bookworm] - ipmctl <no-dsa> (Minor issue)
[bullseye] - ipmctl <no-dsa> (Minor issue)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html