CVE-2023-29162: Medium severity Intel C++ Compiler Classic vulnerability

Q: What is the severity of CVE-2023-29162?

CVE-2023-29162 is classified as a vulnerability that may lead to elevation of privilege for a local user.

Q: How do I fix CVE-2023-29162?

To mitigate CVE-2023-29162, upgrade to Intel C++ Compiler Classic version 2021.8 or later and Intel oneAPI Toolkits version 2022.3.1 or later.

Q: Who is affected by CVE-2023-29162?

Users of Intel C++ Compiler Classic versions before 2021.8 and Intel oneAPI Toolkits versions before 2022.3.1 are affected by CVE-2023-29162.

Q: What types of attacks can exploit CVE-2023-29162?

CVE-2023-29162 may allow a privileged user to escalate their privileges through local access.

Q: Is a workaround available for CVE-2023-29162?

There are no specific workarounds mentioned for CVE-2023-29162, so upgrading to the latest versions is recommended.

Published Feb 14, 2024

Updated

Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected Software

20 affected components

Intel C++ Compiler Classic<2021.8

Intel oneAPI Toolkits<2022.3.1

Intel Advisor<2023.2

Intel Cluster Checker=2021.7.3

Intel Distribution for Python=2023.1

Intel Inspector<2023.2

Intel Integrated Performance Primitives=2021.9

Intel Integrated Performance Primitives Cryptography<2021.8

Intel MPI Library<2021.10

Intel Oneapi Ai Analytics Toolkit=2023.2

Intel Oneapi Base Toolkit<2023.2

Intel Oneapi Base Toolkit=2023.2

Intel oneAPI Deep Neural Network<2023.2

Intel oneAPI Deep Neural Network=2023.2

Intel oneAPI HPC Toolkit=2023.2

Intel Oneapi Iot Toolkit=2023.2

Intel oneAPI Math Kernel Library<2023.2

Intel Threading Building Blocks<2021.10

Intel Trace Analyzer and Collector=2021.10.0

Intel Vtune Profiler<2023.2

Event History

Feb 14, 2024

CVE Published

via MITRE·01:38 PM

Data Sourced

via MITRE·01:38 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-29162?

CVE-2023-29162 is classified as a vulnerability that may lead to elevation of privilege for a local user.

How do I fix CVE-2023-29162?

To mitigate CVE-2023-29162, upgrade to Intel C++ Compiler Classic version 2021.8 or later and Intel oneAPI Toolkits version 2022.3.1 or later.

Who is affected by CVE-2023-29162?

Users of Intel C++ Compiler Classic versions before 2021.8 and Intel oneAPI Toolkits versions before 2022.3.1 are affected by CVE-2023-29162.

What types of attacks can exploit CVE-2023-29162?

CVE-2023-29162 may allow a privileged user to escalate their privileges through local access.

Is a workaround available for CVE-2023-29162?