← Vulnerability feed

Vulnerability record · CVE-2023-29153 · published 14 February 2024

CVE-2023-29153: Intel server platform services uncontrolled resource consumption vulnerability

Intel · Server Platform Services

Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access.

4.9 CVSS 3.1 Medium EPSS 0.69% · top 49.1% CWE-400 · Uncontrolled resource consumption
4.9CVSS 3.1 base score
0.69%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://security.netapp.com/advisory/ntap-20240322-0005/ Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01003.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20240322-0005/ Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01003.html Vendor Advisory

Track CVE-2023-29153 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-28531Openbsd openssh improper access control vulnerabilityssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is…EPSS 2.3%8.8CVE-2020-29569Xen use after free vulnerabilityAn issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thr…EPSS 0.39%8.2CVE-2023-45745Intel tdx module improper input validation vulnerabilityImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalat…EPSS 0.38%8.1CVE-2024-33599Gnu glibc stack-based buffer overflow vulnerabilitynscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a…EPSS 1.3%7.8CVE-2022-36348Intel server platform services vulnerabilityActive debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user to potentially enable escalatio…EPSS 0.20%7.8CVE-2021-38160Linux kernel classic buffer overflow vulnerabilityIn drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a b…EPSS 0.40%7.8CVE-2020-12360Intel bios out-of-bounds read vulnerabilityOut of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via loc…EPSS 0.35%7.8CVE-2020-8744Intel converged security and management engine vulnerabilityImproper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4…EPSS 0.36%

Source: NIST National Vulnerability Database (record CVE-2023-29153), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.