CVE-2024-23909

Published: Aug 14, 2024Modified: Sep 6, 2024

5.4

Vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: secure@intel.com (Secondary)

Description

Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (31)

Products: Intel: Field Programmable Gate Array Software Development Kit For Opencl

Intel

1 product

Field Programmable Gate Array Software Development Kit For Opencl

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 13.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 13.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 13.0 sp1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 13.0 sp1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 13.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 13.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 14.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 14.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 14.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 14.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 15.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 15.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 15.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 15.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 16.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 16.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 16.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 16.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 17.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 17.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 17.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 17.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 18.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 18.0
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 18.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 18.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 19.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 19.1
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 19.2
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 19.3
Intel Field Programmable Gate Array Software Development Kit For Opencl	Version 19.4

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (1)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html

Source: secure@intel.com

Vendor Advisory

Timeline

No history available yet.