Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-23910

Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access.

Published

2023-05-10T14:15:30.950

Last Modified

2024-11-21T07:47:04.990

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.9 (LOW)

Weaknesses

Type: Secondary
CWE-787
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	intel	oneapi_hpc_toolkit	< 2023.0.0	Yes
Application	intel	trace_analyzer_and_collector	< 2021.8.0	Yes

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html Vendor Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)