What’s Vulnerable › Vulnerabilities

CVE-2023-27391

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-11 · updated 2026-06-17
• Weakness: CWE-284

Description

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Advisor For Oneapi: before 2023.1 — fixed in 2023.1
• Intel Cpu Runtime For Opencl Applications: before 2023.1 — fixed in 2023.1
• Intel Distribution For Python Programming Language: before 2023.1 — fixed in 2023.1
• Intel Dpc++ Compatibility Tool: before 2023.1 — fixed in 2023.1
• Intel Embree Ray Tracing Kernel Library: before 2023.1 — fixed in 2023.1
• Intel Fortran Compiler: before 2023.1 — fixed in 2023.1
• Intel Implicit Spmd Program Compiler: before 1.19.1 — fixed in 1.19.1
• Intel Inspector For Oneapi: before 2023.1 — fixed in 2023.1
• Intel Corporation Intel Integrated Performance Primitives: before 2021.8 — fixed in 2021.8
• Intel Ipp Cryptography: before 2021.7.0 — fixed in 2021.7.0
• Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit: before 2021.9.0 — fixed in 2021.9.0
• Intel Oneapi Base Toolkit: before 2023.1 — fixed in 2023.1
• Intel(R) oneAPI Data Analytics Library (oneDAL) for Intel(R) oneAPI Base Toolkit: before 2023.1 — fixed in 2023.1
• Intel Oneapi Deep Neural Network Library: before 2023.1 — fixed in 2023.1
• Intel(R) oneAPI DPC++/C++ Compiler: before 2023.1 — fixed in 2023.1
• Intel Oneapi Dpc++ Library (Onedpl): before 2022.1 — fixed in 2022.1
• Intel Oneapi Hpc Toolkit: before 2023.1 — fixed in 2023.1
• Intel Oneapi Iot Toolkit: before 2023.1 — fixed in 2023.1
• Intel Oneapi Math Kernel Library: before 2023.1 — fixed in 2023.1
• Intel(R) oneAPI Rendering Toolkit: before 2023.1 — fixed in 2023.1
• Intel Oneapi Threading Building Blocks: before 2021.9.0 — fixed in 2021.9.0
• Intel Oneapi Toolkit And Component Software Installer: before 4.3.1.493 — fixed in 4.3.1.493
• Intel Oneapi Video Processing Library: before 2023.1 — fixed in 2023.1
• Intel Open Image Denoise: before 1.4.3 — fixed in 1.4.3
• Intel Open Volume Kernel Library: before 2023.1 — fixed in 2023.1
• Intel Ospray: before 2023.1 — fixed in 2023.1
• Intel Ospray Studio: before 2023.1 — fixed in 2023.1
• Intel(R) Trace Analyzer and Collector software: before 2021.9.0 — fixed in 2021.9.0
• Intel Vtune Profiler For Oneapi: before 2023.1 — fixed in 2023.1

How to fix

Upgrade to a fixed version: Intel Advisor For Oneapi 2023.1; Intel Cpu Runtime For Opencl Applications 2023.1; Intel Distribution For Python Programming Language 2023.1; Intel Dpc++ Compatibility Tool 2023.1; Intel Embree Ray Tracing Kernel Library 2023.1; Intel Fortran Compiler 2023.1; Intel Implicit Spmd Program Compiler 1.19.1; Intel Inspector For Oneapi 2023.1; Intel Corporation Intel Integrated Performance Primitives 2021.8; Intel Ipp Cryptography 2021.7.0; Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit 2021.9.0; Intel Oneapi Base Toolkit 2023.1. Check the vendor advisory for mitigations.

References

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html
• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html

Get alerted when CVE-2023-27391 or the next vulnerability affects your stack