CVE-2023-27391

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

Published: Aug 11, 2023
Updated: Aug 18, 2023
CVE: CVE-2023-27391
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
intel / open_image_denoise	-	1.4.3
intel / advisor_for_oneapi	-	2023.1
intel / cpu_runtime_for_opencl_applications	-	2023.1
intel / distribution_for_python_programming_language	-	2023.1
intel / dpc++_compatibility_tool	-	2023.1
intel / embree_ray_tracing_kernel_library	-	2023.1
intel / fortran_compiler	-	2023.1
intel / implicit_spmd_program_compiler	-	1.19.1
intel / inspector_for_oneapi	-	2023.1
intel / integrated_performance_primitives	-	2021.8
intel / ipp_cryptography	-	2021.7.0
intel / mpi_library	-	2021.9.0
intel / oneapi_base_toolkit	-	2023.1
intel / oneapi_data_analytics_library	-	2023.1
intel / oneapi_deep_neural_network_library	-	2023.1
intel / oneapi_dpc++/c++_compiler	-	2023.1
intel / oneapi_dpc++_library_(onedpl)	-	2022.1
intel / oneapi_hpc_toolkit	-	2023.1
intel / oneapi_iot_toolkit	-	2023.1
intel / oneapi_math_kernel_library	-	2023.1
intel / oneapi_rendering_toolkit	-	2023.1
intel / oneapi_threading_building_blocks	-	2021.9.0
intel / oneapi_toolkit_and_component_software_installer	-	4.3.1.493
intel / oneapi_video_processing_library	-	2023.1
intel / open_volume_kernel_library	-	2023.1
intel / ospray	-	2023.1
intel / ospray_studio	-	2023.1
intel / trace_analyzer_and_collector	-	2021.9.0
intel / vtune_profiler_for_oneapi	-	2023.1

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html

Vulnerability Database

289,871

CVE-2023-27391