Lucene search

Alpine Linux Development TeamALPINE:CVE-2022-26345

HistoryFeb 16, 2023 - 8:15 p.m.

CVE-2022-26345

2023-02-1620:15:13

Alpine Linux Development Team

security.alpinelinux.org

uncontrolled search path

intel(r) oneapi toolkit

privilege escalation

local access

cve-2022-26345

unix

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Uncontrolled search path element in the Intel® oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchopenmp= 16.0.6-r0UNKNOWN
Alpine3.19-communitynoarchopenmp= 17.0.5-r0UNKNOWN
Alpine3.20-communitynoarchopenmp= 17.0.6-r0UNKNOWN
Alpineedge-communitynoarchopenmp= 18.1.8-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.18-community	noarch	openmp	= 16.0.6-r0	UNKNOWN
Alpine	3.19-community	noarch	openmp	= 17.0.5-r0	UNKNOWN
Alpine	3.20-community	noarch	openmp	= 17.0.6-r0	UNKNOWN
Alpine	edge-community	noarch	openmp	= 18.1.8-r0	UNKNOWN

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Related for ALPINE:CVE-2022-26345