CVE-2023-28823

🗓️ 11 Aug 2023 02:37:17Reported by intelType

Uncontrolled search path in Intel(R) oneAPI Toolkit & component software installers, v4.3.1.493 & prior, may enable privilege escalation via local access

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2023-28823	7 Feb 202411:07	–	circl
CNNVD	Intel oneAPI Toolkits Code Issue Vulnerability	11 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-28823	11 Aug 202302:37	–	cvelist
EUVD	EUVD-2023-32455	3 Oct 202520:07	–	euvd
Intel	Intel® oneAPI Toolkit and Component Software Installers Advisory	8 Aug 202300:00	–	intel
NCSC	Vulnerabilities fixed in Oracle Communications products	18 Jan 202400:00	–	ncsc
NCSC	Vulnerabilities fixed in Oracle Database Products	18 Apr 202400:00	–	ncsc
NCSC	Vulnerabilities fixed in Oracle Enterprise Manager	17 Oct 202413:18	–	ncsc
NVD	CVE-2023-28823	11 Aug 202303:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2024	16 Apr 202400:00	–	oracle

NVD

Node

intel advisor_for_oneapiRange<2023.1

intel cpu_runtime_for_opencl_applicationsRange<2023.1

intel distribution_for_python_programming_languageRange<2023.1

intel dpc++_compatibility_toolRange<2023.1

intel embree_ray_tracing_kernel_libraryRange<2023.1

intel fortran_compilerRange<2023.1

intel implicit_spmd_program_compilerRange<1.19.1

intel inspector_for_oneapiRange<2023.1

intel integrated_performance_primitivesRange<2021.8

intel ipp_cryptographyRange<2021.7.0

intel mpi_libraryRange<2021.9.0

intel oneapi_base_toolkitRange<2023.1

intel oneapi_data_analytics_libraryRange<2023.1

intel oneapi_deep_neural_network_libraryRange<2023.1

intel oneapi_dpc++/c++_compilerRange<2023.1

intel oneapi_dpc++_library_(onedpl)Range<2022.1

intel oneapi_hpc_toolkitRange<2023.1

intel oneapi_iot_toolkitRange<2023.1

intel oneapi_math_kernel_libraryRange<2023.1

intel oneapi_rendering_toolkitRange<2023.1

intel oneapi_threading_building_blocksRange<2021.9.0

intel oneapi_toolkit_and_component_software_installerRange<4.3.1.493

intel oneapi_video_processing_libraryRange<2023.1

intel open_image_denoiseRange<1.4.3

intel open_volume_kernel_libraryRange<2023.1

intel osprayRange<2023.1

intel ospray_studioRange<2023.1

intel trace_analyzer_and_collectorRange<2021.9.0

intel vtune_profiler_for_oneapiRange<2023.1

[
  {
    "vendor": "n/a",
    "product": "Intel(R) oneAPI Toolkit and component software installers",
    "versions": [
      {
        "version": "before version 4.3.1.493",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html

21 Nov 2024 07:56Current

8.3High risk

Vulners AI Score8.3

CVSS 3.16.7 - 7.3

EPSS0.00066

SSVC

CWE-427