Improper Buffer Restrictions in Intel(R) C++ Compiler Classic
CVE-2022-41342

6MEDIUM

Key Information:

Vendor
Intel
Status
Intel(r) C++ Compiler Classic Before Version 2021.7.1 For Some Intel(r) Oneapi Toolkits
Vendor
CVE Published:
6 February 2023

Summary

The Intel(R) C++ Compiler Classic has a flaw related to inadequate buffer restrictions that affects versions prior to 2021.7.1. This vulnerability allows privileged users, with local access to a system, to potentially escalate their privileges. Users of the Intel(R) oneAPI Toolkits, specifically those on any version before 2022.3.1, are also at risk. It is crucial for organizations utilizing these tools to apply the necessary updates and mitigate risks to their systems to avoid potential exploitation.

Affected Version(s)

Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.