CVE Vulnerabilities

CVE-2023-27391

Published: Aug 11, 2023 | Modified: Nov 07, 2023
CVSS 3.x
6.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected Software

Name Vendor Start Version End Version
Advisor_for_oneapi Intel * 2023.1 (excluding)
Cpu_runtime_for_opencl_applications Intel * 2023.1 (excluding)
Distribution_for_python_programming_language Intel * 2023.1 (excluding)
Dpc++_compatibility_tool Intel * 2023.1 (excluding)
Embree_ray_tracing_kernel_library Intel * 2023.1 (excluding)
Fortran_compiler Intel * 2023.1 (excluding)
Implicit_spmd_program_compiler Intel * 1.19.1 (excluding)
Inspector_for_oneapi Intel * 2023.1 (excluding)
Integrated_performance_primitives Intel * 2021.8 (excluding)
Ipp_cryptography Intel * 2021.7.0 (excluding)
Mpi_library Intel * 2021.9.0 (excluding)
Oneapi_base_toolkit Intel * 2023.1 (excluding)
Oneapi_data_analytics_library Intel * 2023.1 (excluding)
Oneapi_deep_neural_network_library Intel * 2023.1 (excluding)
Oneapi_dpc++/c++_compiler Intel * 2023.1 (excluding)
Oneapi_dpc++library(onedpl) Intel * 2022.1 (excluding)
Oneapi_hpc_toolkit Intel * 2023.1 (excluding)
Oneapi_iot_toolkit Intel * 2023.1 (excluding)
Oneapi_math_kernel_library Intel * 2023.1 (excluding)
Oneapi_rendering_toolkit Intel * 2023.1 (excluding)
Oneapi_threading_building_blocks Intel * 2021.9.0 (excluding)
Oneapi_toolkit_and_component_software_installer Intel * 4.3.1.493 (excluding)
Oneapi_video_processing_library Intel * 2023.1 (excluding)
Open_image_denoise Intel * 1.4.3 (excluding)
Open_volume_kernel_library Intel * 2023.1 (excluding)
Ospray Intel * 2023.1 (excluding)
Ospray_studio Intel * 2023.1 (excluding)
Trace_analyzer_and_collector Intel * 2021.9.0 (excluding)
Vtune_profiler_for_oneapi Intel * 2023.1 (excluding)

References