cve-2017-5682
Vulnerability from cvelistv5
Published
2017-02-28 19:00
Modified
2024-08-05 15:11
Severity ?
Summary
Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges.
References
secure@intel.comhttp://www.securityfocus.com/bid/96482Third Party Advisory, VDB Entry
secure@intel.comhttps://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070&languageid=en-frVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/96482Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070&languageid=en-frVendor Advisory
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.398Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr"
          },
          {
            "name": "96482",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96482"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2"
            }
          ]
        }
      ],
      "datePublic": "2017-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-03-02T10:57:01",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr"
        },
        {
          "name": "96482",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96482"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2017-5682",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr",
              "refsource": "CONFIRM",
              "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr"
            },
            {
              "name": "96482",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96482"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2017-5682",
    "datePublished": "2017-02-28T19:00:00",
    "dateReserved": "2017-02-01T00:00:00",
    "dateUpdated": "2024-08-05T15:11:48.398Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:advisor:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83E6F5FC-D325-4C8C-82E9-82B5FFCEB083\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"91AFB020-6F26-4D0D-A373-5E6341975421\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:data_analytics_acceleration_library:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B40F7BDC-1317-480B-9B23-1F13758543D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:inspector:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D9644872-437C-4AD5-9D7C-811E527CC13B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:integrated_performance_primitives:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B67785D4-D084-4C3E-81E6-B6C5BD110885\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:math_kernel_library:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B94882E-342F-4D87-A0D2-6F0C9282B096\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:mpi_library:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B60FA44-7160-4D1A-98AE-744FC2C91B88\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:parallel_studio_xe:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E9DFA92D-02DD-4623-A7A5-B7780CE24996\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:system_studio:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1314F593-5448-4458-A7FF-A479909C0147\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:threading_building_blocks:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"096729CA-6729-480D-BEDD-B294DCB3B789\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:trace_analyzer_and_collector:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73D61D38-EC35-4C15-996C-28484709A42D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:intel:vtune_amplifier:2017:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C3A8F80A-95C3-44A1-BB71-8E1A3581B8D2\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges.\"}, {\"lang\": \"es\", \"value\": \"Intel PSET Application Install wrapper de Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer y Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library y Intel Threading Building Blocks en versiones anteriores a 2017 Update 2 permite a un atacante iniciar un proceso con privilegios escalados.\"}]",
      "id": "CVE-2017-5682",
      "lastModified": "2024-11-21T03:28:12.833",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.3, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\", \"baseScore\": 9.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2017-02-28T19:59:00.160",
      "references": "[{\"url\": \"http://www.securityfocus.com/bid/96482\", \"source\": \"secure@intel.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr\", \"source\": \"secure@intel.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/96482\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "secure@intel.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-5682\",\"sourceIdentifier\":\"secure@intel.com\",\"published\":\"2017-02-28T19:59:00.160\",\"lastModified\":\"2024-11-21T03:28:12.833\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges.\"},{\"lang\":\"es\",\"value\":\"Intel PSET Application Install wrapper de Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer y Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library y Intel Threading Building Blocks en versiones anteriores a 2017 Update 2 permite a un atacante iniciar un proceso con privilegios escalados.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.3,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:advisor:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83E6F5FC-D325-4C8C-82E9-82B5FFCEB083\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91AFB020-6F26-4D0D-A373-5E6341975421\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:data_analytics_acceleration_library:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B40F7BDC-1317-480B-9B23-1F13758543D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:inspector:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9644872-437C-4AD5-9D7C-811E527CC13B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:integrated_performance_primitives:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B67785D4-D084-4C3E-81E6-B6C5BD110885\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:math_kernel_library:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B94882E-342F-4D87-A0D2-6F0C9282B096\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:mpi_library:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B60FA44-7160-4D1A-98AE-744FC2C91B88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:parallel_studio_xe:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9DFA92D-02DD-4623-A7A5-B7780CE24996\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:system_studio:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1314F593-5448-4458-A7FF-A479909C0147\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:threading_building_blocks:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"096729CA-6729-480D-BEDD-B294DCB3B789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:trace_analyzer_and_collector:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73D61D38-EC35-4C15-996C-28484709A42D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:intel:vtune_amplifier:2017:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3A8F80A-95C3-44A1-BB71-8E1A3581B8D2\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/96482\",\"source\":\"secure@intel.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr\",\"source\":\"secure@intel.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/96482\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070\u0026languageid=en-fr\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.