#VU87125 Improper access control in Intel products - CVE-2023-35121
Vulnerability identifier: #VU87125
Vulnerability risk: Low
CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID:
CWE-ID:
CWE-284
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Intel Cluster Checker
Hardware solutions /
Firmware
Intel Distribution for Python
Hardware solutions /
Firmware
Intel oneAPI AI Analytics Toolkit
Hardware solutions /
Firmware
Intel oneAPI Math Kernel Library
Hardware solutions /
Firmware
Intel VTune™ Profiler for oneAPI
Hardware solutions /
Firmware
Intel Integrated Performance Primitives
Universal components / Libraries /
Libraries used by multiple products
MPI Library
Universal components / Libraries /
Libraries used by multiple products
Intel Trace Analyzer and Collector
Universal components / Libraries /
Software for developers
oneAPI DPC++/C++ Compiler
Universal components / Libraries /
Software for developers
Intel Advisor for oneAPI
Universal components / Libraries /
Software for developers
Intel Inspector for oneAPI
Universal components / Libraries /
Software for developers
Intel IPP Cryptography
Universal components / Libraries /
Software for developers
Intel oneAPI Base Toolkit
Universal components / Libraries /
Software for developers
Intel oneAPI Deep Neural Network Library
Universal components / Libraries /
Software for developers
Intel oneAPI HPC Toolkit
Universal components / Libraries /
Software for developers
Intel oneAPI IoT Toolkit
Universal components / Libraries /
Software for developers
Intel oneAPI Threading Building Blocks
Universal components / Libraries /
Software for developers
Vendor: Intel
Description
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges on the system.
Mitigation
Install updates from vendor's website.
Vulnerable software versions
Intel Cluster Checker: 2021.7.3
Intel Integrated Performance Primitives: 2021.9.0
Intel Distribution for Python: 2023.1
Intel oneAPI AI Analytics Toolkit: 2023.2
Intel Trace Analyzer and Collector: 2021.10.0
oneAPI DPC++/C++ Compiler: before 2023.2.1
Intel Advisor for oneAPI: before 2023.2.0
Intel Inspector for oneAPI: before 2023.2.0
Intel IPP Cryptography: before 2021.8.0
MPI Library: before 2021.10.0
Intel oneAPI Base Toolkit: before 2023.2.0
Intel oneAPI Deep Neural Network Library: before 2023.2.0
Intel oneAPI HPC Toolkit: before 2023.2.0
Intel oneAPI IoT Toolkit: before 2023.2.0
Intel oneAPI Math Kernel Library: before 2023.2.0
Intel oneAPI Threading Building Blocks: before 2021.10.0
Intel VTune™ Profiler for oneAPI: before 2023.2.0
External links
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
