Intel oneAPI Privilege Escalation via Installer Config/Path Issues (CVE-2023-20080/20077/20079)

Key Information Intel ID: INTEL-SA-01205 Advisory Category: Software Impact of Vulnerability: Escalation of Privilege Severity Rating: MEDIUM Original Issue Date: 08/12/2023 Last Revised: 08/12/2023 Vulnerability Details CVE-2023-20080 - Description: Improper configuration permissions in the Intel oneAPI DPC++/C++ Compiler software installer may allow an authenticated user to potentially enable privileges on the local system. - CVSS v3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS Base Score: 4.0 (MEDIUM) CVE-2023-20077 - Description: Uncontrolled search paths in certain Intel oneAPI toolkits and component software installers may allow unauthorized users to potentially enable privileges on the local system. - CVSS v3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS Base Score: 6.7 (MEDIUM) CVE-2023-20079 - Description: In Intel oneAPI DPC++/C++ Compiler software prior to version 2022.0.1, uncontrolled search paths may allow unauthorized users to potentially enable privileges on the local system. - CVSS v3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS Base Score: 6.7 (MEDIUM) Affected Products Intel oneAPI Base Toolkit prior to version 2021.6 IFPGA Support Package for the Intel oneAPI DPC++/C++ Compiler prior to version 2024.2.1 Intel oneAPI Data Analytics Library prior to version 2023.4.0 Intel oneAPI DPC++/C++ Compiler for Linux prior to version 2025.1.0 Intel® DPC++ Compatibility Tool prior to version 2023.3.0 Intel® Distribution for GDB prior to version 2023.1.0 Intel® Fortran Compiler prior to version 2025.1.0 Intel® HPC Toolkit prior to version 2022.1.0 Intel® Inspector prior to version 2024.2.0 Intel® Integrated Performance Primitives prior to version 2022.7.0 Intel® Integrated Performance Primitives Cryptography prior to version 2022.2 Intel® Trace Analyzer and Collector prior to version 2023.7.0 Intel® MPI Library prior to version 2023.1.0 Intel® Graphics Offline Compiler for OpenCL™ Code prior to version 2025.1.0 Intel® Advisor prior to version 2023.1.0 Intel® VTune™ Profiler prior to version 2025.1.0 Intel® oneAPI Deep Neural Network Library prior to version 2024.2.1 Intel® oneAPI DPC++ Library prior to version 2023.2.1 Intel® oneAPI Math Kernel Library prior to version 2024.2.1 Intel® oneAPI Threading Building Blocks prior to version 2022.1.1 Intel® oneAPI DPC++/C++ Compiler for open source prior to version 6.0.0 Recommendations Intel recommends upgrading Intel oneAPI toolkits to the latest version.

Goal Reached Thanks to every supporter — we hit 100%!

Intel oneAPI Privilege Escalation via Installer Config/Path Issues (CVE-2023-20080/20077/20079)