CVE-2023-35121 in oneAPI DPC++ Compiler Software

Résumé

par MITRE • 14/02/2024

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Intel Corporation
• Réserver: 04/08/2023
• Divulgation: 14/02/2024
• Modérer: accepté
• Entrée: VDB-253798
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 7.8 (CNA)
• EPSS: 0.00161
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-35121
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-35121
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-35121/