Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Intel
  • Advisor
  • Cpu Runtime
  • Distribution For Python
  • Dpc\+\+ Compatibility Tool
  • Embree Ray Tracing Kernel Library
  • Fortran Compiler
  • Implicit Spmd Program Compiler
  • Inspector
  • Integrated Performance Primitives
  • Integrated Performance Primitives Cryptography
  • Mpi Library
  • Oneapi Base Toolkit
  • Oneapi Data Analytics Library
  • Oneapi Deep Neural Network Library
  • Oneapi Dpc\+\+\/c\+\+ Compiler
  • Oneapi Dpc\+\+ Library
  • Oneapi Hpc Toolkit
  • Oneapi Iot Toolkit
  • Oneapi Math Kernel Library
  • Oneapi Rendering Toolkit
  • Oneapi Threading Building Blocks
  • Oneapi Toolkit And Component Software Installers
  • Oneapi Video Processing Library
  • Open Image Denoise
  • Open Volume Kernel Library
  • Ospray
  • Ospray Studio
  • Trace Analyzer And Collector
  • Vtune Profiler

Configuration 1 [-]

OR cpe:2.3:a:intel:advisor:*:*:*:*:*:oneapi:*:*
cpe:2.3:a:intel:cpu_runtime:*:*:*:*:*:opencl:*:*
cpe:2.3:a:intel:distribution_for_python:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:dpc\+\+_compatibility_tool:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:inspector:*:*:*:*:*:oneapi:*:*
cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_data_analytics_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_deep_neural_network_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_dpc\+\+\/c\+\+_compiler:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_dpc\+\+_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_hpc_toolkit:2023.0.0:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_iot_toolkit:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_rendering_toolkit:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_threading_building_blocks:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_toolkit_and_component_software_installers:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_video_processing_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:open_image_denoise:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:open_volume_kernel_library:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:ospray:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:ospray_studio:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:trace_analyzer_and_collector:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html cve-icon cve-icon
History

Fri, 24 Jan 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: intel

Published:

Updated: 2025-01-24T17:36:46.630Z

Reserved: 2023-01-07T04:00:03.309Z

Link: CVE-2023-22355

cve-icon Vulnrichment

Updated: 2024-08-02T10:07:06.156Z

cve-icon NVD

Status : Modified

Published: 2023-05-10T14:15:27.240

Modified: 2024-11-21T07:44:37.140

Link: CVE-2023-22355

cve-icon Redhat

No data.