CVE-2023-35121: High severity Intel oneAPI DPC++/C++ Compiler vulnerability

Q: What is the severity of CVE-2023-35121?

CVE-2023-35121 has been classified with a severity that indicates potential privilege escalation risks for authenticated users.

Q: How do I fix CVE-2023-35121?

To fix CVE-2023-35121, update the Intel oneAPI DPC++/C++ Compiler to version 2022.2.1 or later and the Intel oneAPI Toolkits to version 2022.3.1 or later.

Q: Who is affected by CVE-2023-35121?

CVE-2023-35121 affects users of Intel oneAPI DPC++/C++ Compiler versions prior to 2022.2.1 and Intel oneAPI Toolkits versions prior to 2022.3.1.

Q: What type of vulnerability is CVE-2023-35121?

CVE-2023-35121 is classified as an improper access control vulnerability.

Q: Can an attacker exploit CVE-2023-35121 remotely?

No, CVE-2023-35121 requires local access by an authenticated user to exploit the privilege escalation.

Published Feb 14, 2024

Updated

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.

Affected Software

20 affected components

Intel oneAPI DPC++/C++ Compiler<2022.2.1

Intel oneAPI Toolkits<2022.3.1

Intel Advisor<2023.2

Intel Cluster Checker=2021.7.3

Intel Distribution for Python=2023.1

Intel Inspector<2023.2

Intel Integrated Performance Primitives=2021.9

Intel Integrated Performance Primitives Cryptography<2021.8

Intel MPI Library<2021.10

Intel Oneapi Ai Analytics Toolkit=2023.2

Intel Oneapi Base Toolkit<2023.2

Intel Oneapi Base Toolkit=2023.2

Intel oneAPI Deep Neural Network<2023.2

Intel oneAPI Deep Neural Network=2023.2

Intel oneAPI HPC Toolkit=2023.2

Intel Oneapi Iot Toolkit=2023.2

Intel oneAPI Math Kernel Library<2023.2

Intel Threading Building Blocks<2021.10

Intel Trace Analyzer and Collector=2021.10.0

Intel Vtune Profiler<2023.2

Event History

Feb 14, 2024

CVE Published

via MITRE·01:38 PM

Data Sourced

via MITRE·01:38 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-35121?

CVE-2023-35121 has been classified with a severity that indicates potential privilege escalation risks for authenticated users.

How do I fix CVE-2023-35121?

To fix CVE-2023-35121, update the Intel oneAPI DPC++/C++ Compiler to version 2022.2.1 or later and the Intel oneAPI Toolkits to version 2022.3.1 or later.

Who is affected by CVE-2023-35121?

CVE-2023-35121 affects users of Intel oneAPI DPC++/C++ Compiler versions prior to 2022.2.1 and Intel oneAPI Toolkits versions prior to 2022.3.1.

What type of vulnerability is CVE-2023-35121?

CVE-2023-35121 is classified as an improper access control vulnerability.

Can an attacker exploit CVE-2023-35121 remotely?