Improper access control in Intel products - CVE-2023-27391

Vulnerability identifier: #VU79531

CSH Severity: Low

CVSS v4: 8.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-27391

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper access restrictions. A local user can escalate privileges on the system.

Intel Open Image Denoise
Intel Implicit SPMD Program Compiler
Intel IPP Cryptography
Intel Trace Analyzer and Collector
Intel oneAPI Threading Building Blocks
Intel oneAPI DPC++ Library (oneDPL)
Intel oneAPI DPC++/C++ Compiler
Intel oneAPI Rendering Toolkit
Intel oneAPI Video Processing Library
Intel Open Volume Kernel Library
Intel OSPRay
Intel OSPRay Studio
Intel VTune Profiler for oneAPI
Intel oneAPI IoT Toolkit
Intel oneAPI HPC Toolkit
Intel Advisor for oneAPI
Intel oneAPI Deep Neural Network Library
Intel oneAPI Data Analytics Library
Intel oneAPI Base Toolkit
Intel Inspector for oneAPI
Intel Fortran Compiler
Intel Embree Ray Tracing Kernel Library
Intel DPC++ Compatibility Tool
Intel CPU Runtime for OpenCL Applications
Intel Integrated Performance Primitives
MPI Library
Intel oneAPI Math Kernel Library
Intel oneAPI Toolkits
Intel Distribution for Python programming language

Install updates from vendor's website.

Intel Open Image Denoise - update to 1.4.3
Intel Implicit SPMD Program Compiler - update to 1.19.1
Intel IPP Cryptography - update to 2021.7.0
Intel Integrated Performance Primitives - update to 2021.8
Intel Trace Analyzer and Collector - update to 2021.9.0
Intel oneAPI Threading Building Blocks - update to 2021.9.0
MPI Library - update to 2021.9
Intel oneAPI DPC++ Library (oneDPL) - update to 2022.1
Intel oneAPI Math Kernel Library - update to 2023.1
Intel oneAPI DPC++/C++ Compiler - update to 2023.1
Intel oneAPI Rendering Toolkit - update to 2023.1
Intel oneAPI Video Processing Library - update to 2023.1
Intel Open Volume Kernel Library - update to 2023.1
Intel OSPRay - update to 2023.1
Intel OSPRay Studio - update to 2023.1
Intel VTune Profiler for oneAPI - update to 2023.1
Intel oneAPI Toolkits - update to 2023.1.0
Intel oneAPI IoT Toolkit - update to 2023.1
Intel oneAPI HPC Toolkit - update to 2023.1
Intel Advisor for oneAPI - update to 2023.1
Intel oneAPI Deep Neural Network Library - update to 2023.1
Intel oneAPI Data Analytics Library - update to 2023.1
Intel oneAPI Base Toolkit - update to 2023.1
Intel Inspector for oneAPI - update to 2023.1
Intel Fortran Compiler - update to 2023.1
Intel Embree Ray Tracing Kernel Library - update to 2023.1
Intel DPC++ Compatibility Tool - update to 2023.1
Intel Distribution for Python programming language - update to 2023.1
Intel CPU Runtime for OpenCL Applications - update to 2023.1

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html

• Multiple vulnerabilities in Intel oneAPI Toolkit and Component software installers