Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-42878

Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access.

Published

2023-05-10T14:15:23.103

Last Modified

2024-11-21T07:25:30.940

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 2.8 (LOW)

Weaknesses

Type: Secondary
CWE-395
Type: Primary
CWE-476

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	intel	oneapi_hpc_toolkit	< 2023.0.0	Yes
Application	intel	trace_analyzer_and_collector	< 2021.8.0	Yes

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html Vendor Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)