CVE-2023-23569

2023-05-1014:15:29

CWE-121

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-23569

buffer overflow

intel trace analyzer

collector

privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

16.1%

JSON

Stack-based buffer overflow for some Intel® Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

inteloneapi_hpc_toolkitRange<2023.0.0

inteltrace_analyzer_and_collectorRange<2021.8.0

CPENameOperatorVersion
intel:oneapi_hpc_toolkitintel oneapi hpc toolkitlt2023.0.0
intel:trace_analyzer_and_collectorintel trace analyzer and collectorlt2021.8.0

CPE	Name	Operator	Version
intel:oneapi_hpc_toolkit	intel oneapi hpc toolkit	lt	2023.0.0
intel:trace_analyzer_and_collector	intel trace analyzer and collector	lt	2021.8.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Trace Analyzer and Collector software",
    "versions": [
      {
        "version": "before version 2021.8.0 published Dec 2022",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]