Buffer overflow in Intel products - CVE-2023-29162

Vulnerability identifier: #VU87127

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-29162

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A local administrator can trigger memory corruption and execute arbitrary code on the target system with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Intel Cluster Checker
Intel Distribution for Python
Intel oneAPI AI Analytics Toolkit
Intel C++ Compiler Classic
Intel oneAPI Math Kernel Library
Intel VTune™ Profiler for oneAPI
Intel Integrated Performance Primitives
MPI Library
Intel Trace Analyzer and Collector
Intel IPP Cryptography
Intel oneAPI Threading Building Blocks
Intel Advisor for oneAPI
Intel Inspector for oneAPI
Intel oneAPI Base Toolkit
Intel oneAPI Deep Neural Network Library
Intel oneAPI HPC Toolkit
Intel oneAPI IoT Toolkit

Install updates from vendor's website.

Intel IPP Cryptography - update to 2021.8.0
Intel C++ Compiler Classic - update to 2021.8
MPI Library - update to 2021.10.0
Intel oneAPI Threading Building Blocks - update to 2021.10.0
Intel Advisor for oneAPI - update to 2023.2.0
Intel Inspector for oneAPI - update to 2023.2.0
Intel oneAPI Base Toolkit - update to 2023.2.0
Intel oneAPI Deep Neural Network Library - update to 2023.2.0
Intel oneAPI HPC Toolkit - update to 2023.2.0
Intel oneAPI IoT Toolkit - update to 2023.2.0
Intel oneAPI Math Kernel Library - update to 2023.2.0
Intel VTune™ Profiler for oneAPI - update to 2023.2.0

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html

• Multiple vulnerabilities in Intel oneAPI Toolkit Software