| Title | 複数のインテル製品における制御されていない検索パスの要素に関する脆弱性 |
|---|---|
| Summary | advisor for oneapi、cpu runtime for opencl applications、distribution for python programming language 等複数のインテル製品には、制御されていない検索パスの要素に関する脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。 |
| Publication Date | Aug. 11, 2023, midnight |
| Registration Date | Jan. 22, 2024, 10:58 a.m. |
| Last Update | Jan. 22, 2024, 10:58 a.m. |
| CVSS3.0 : 重要 | |
| Score | 7.3 |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| インテル |
| advisor for oneapi 2023.1 未満 |
| cpu runtime for opencl applications 2023.1 未満 |
| distribution for python programming language 2023.1 未満 |
| dpc++ compatibility tool 2023.1 未満 |
| embree ray tracing kernel library 2023.1 未満 |
| fortran compiler 2023.1 未満 |
| implicit spmd program compiler 1.19.1 未満 |
| inspector for oneapi 2023.1 未満 |
| Intel Integrated Performance Primitives 2021.8 未満 |
| Intel MPI Library 2021.9.0 未満 |
| Intel oneAPI DPC++/C++ Compiler 2023.1 未満 |
| Intel oneAPI Rendering Toolkit 2023.1 未満 |
| Intel Trace Analyzer and Collector |
| ipp cryptography 2021.7.0 未満 |
| oneapi base toolkit 2023.1 未満 |
| oneapi data analytics library 2023.1 未満 |
| oneapi deep neural network library 2023.1 未満 |
| oneapi dpc++ library (onedpl) 2022.1 未満 |
| oneapi hpc toolkit 2023.1 未満 |
| oneapi iot toolkit 2023.1 未満 |
| oneapi math kernel library 2023.1 未満 |
| oneapi threading building blocks |
| oneapi toolkit and component software installer |
| oneapi video processing library |
| open image denoise |
| open volume kernel library |
| ospray |
| ospray studio |
| vtune profiler for oneapi |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2024年01月22日] 掲載 |
Jan. 22, 2024, 10:58 a.m. |
| Summary | Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access. |
|---|---|
| Publication Date | Aug. 11, 2023, 12:15 p.m. |
| Registration Date | Aug. 11, 2023, 4 p.m. |
| Last Update | Nov. 21, 2024, 4:56 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:intel:open_image_denoise:*:*:*:*:*:*:*:* | 1.4.3 | ||||
| cpe:2.3:a:intel:advisor_for_oneapi:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:cpu_runtime_for_opencl_applications:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:distribution_for_python_programming_language:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:dpc\+\+_compatibility_tool:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:* | 1.19.1 | ||||
| cpe:2.3:a:intel:inspector_for_oneapi:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:* | 2021.8 | ||||
| cpe:2.3:a:intel:ipp_cryptography:*:*:*:*:*:*:*:* | 2021.7.0 | ||||
| cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:* | 2021.9.0 | ||||
| cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_data_analytics_library:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_deep_neural_network_library:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_dpc\+\+\/c\+\+_compiler:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_dpc\+\+_library_\(onedpl\):*:*:*:*:*:*:*:* | 2022.1 | ||||
| cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_iot_toolkit:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_rendering_toolkit:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:oneapi_threading_building_blocks:*:*:*:*:*:*:*:* | 2021.9.0 | ||||
| cpe:2.3:a:intel:oneapi_toolkit_and_component_software_installer:*:*:*:*:*:*:*:* | 4.3.1.493 | ||||
| cpe:2.3:a:intel:oneapi_video_processing_library:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:open_volume_kernel_library:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:ospray:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:ospray_studio:*:*:*:*:*:*:*:* | 2023.1 | ||||
| cpe:2.3:a:intel:trace_analyzer_and_collector:*:*:*:*:*:*:*:* | 2021.9.0 | ||||
| cpe:2.3:a:intel:vtune_profiler_for_oneapi:*:*:*:*:*:*:*:* | 2023.1 | ||||