CVE-2023-23910

2023-05-1014:15:30

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-23910

intel

trace analyzer

collector

out-of-bounds write

privilege escalation

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

Out-of-bounds write for some Intel® Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access.

Affected configurations

NVD

Node

inteloneapi_hpc_toolkitRange<2023.0.0

inteltrace_analyzer_and_collectorRange<2021.8.0

CPENameOperatorVersion
intel:oneapi_hpc_toolkitintel oneapi hpc toolkitlt2023.0.0
intel:trace_analyzer_and_collectorintel trace analyzer and collectorlt2021.8.0

CPE	Name	Operator	Version
intel:oneapi_hpc_toolkit	intel oneapi hpc toolkit	lt	2023.0.0
intel:trace_analyzer_and_collector	intel trace analyzer and collector	lt	2021.8.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Trace Analyzer and Collector software",
    "versions": [
      {
        "version": "before version 2021.8.0 published Dec 2022",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]