CVE-2023-22355

ALTO 7.8CVE-2023-22355 · Published 10/05/2023 · updated 17/06/2026

In breve

CVE-2023-22355 è una vulnerabilità ALTO (CVSS 7.8) che riguarda advisor (intel), cpu runtime (intel), distribution for python (intel).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.21%, superiore al 11.1% delle vulnerabilità.
Correzione: aggiornare a 2023.0, 1.18.1, 2021.7, 2021.6.3 o successiva.

Package	Affected versions	Patched versions
advisor intel	`< 2023.0`	`2023.0`
cpu runtime intel	`< 2023.0`	`2023.0`
distribution for python intel	`< 2023.0`	`2023.0`
dpc++ compatibility tool intel	`< 2023.0`	`2023.0`
embree ray tracing kernel library intel	`< 2023.0`	`2023.0`
fortran compiler intel	`< 2023.0`	`2023.0`
implicit spmd program compiler intel	`< 1.18.1`	`1.18.1`
inspector intel	`< 2023.0`	`2023.0`
integrated performance primitives intel	`< 2021.7`	`2021.7`
integrated performance primitives cryptography intel	`< 2021.6.3`	`2021.6.3`
mpi library intel	`< 2021.8`	`2021.8`
oneapi base toolkit intel	`< 2023.0`	`2023.0`
oneapi data analytics library intel	`< 2023.0`	`2023.0`
oneapi deep neural network library intel	`< 2023.0`	`2023.0`
oneapi dpc++/c++ compiler intel	`< 2023.0`	`2023.0`
oneapi dpc++ library intel	`< 2022.0`	`2022.0`
oneapi hpc toolkit intel	`= 2023.0.0< 2023.0.0`	`2023.0.0`
oneapi iot toolkit intel	`< 2023.0`	`2023.0`
oneapi math kernel library intel	`< 2023.0`	`2023.0`
oneapi rendering toolkit intel	`< 2023.0`	`2023.0`
oneapi threading building blocks intel	`< 2021.8`	`2021.8`
oneapi toolkit and component software installers intel	`< 4.3.0.251`	`4.3.0.251`
oneapi video processing library intel	`< 2023.0`	`2023.0`
open image denoise intel	`< 1.4.3`	`1.4.3`
open volume kernel library intel	`< 2023.0`	`2023.0`
ospray intel	`< 2023.0`	`2023.0`
ospray studio intel	`< 2023.0`	`2023.0`
trace analyzer and collector intel	`< 2021.8.0`	`2021.8.0`
vtune profiler intel	`< 2023.0`	`2023.0`

Description

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html · Vendor Advisory

Altre vulnerabilità di advisor

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free