CVE-2023-27383: 
NixOS vulnerability analysis and mitigation

A protection mechanism failure vulnerability was identified in Intel oneAPI HPC Toolkit 2023.1 and Intel MPI Library software versions prior to 2021.9. The vulnerability, tracked as CVE-2023-27383, was discovered internally by Intel employees and disclosed on November 14, 2023 (Intel Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 6.8 (Medium severity) with the following vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The attack vector is adjacent network-based, requires high privileges but no user interaction, and could potentially impact confidentiality, integrity, and availability (NVD).

If exploited, this vulnerability could allow a privileged user to potentially enable escalation of privilege via adjacent access, affecting the security of Intel oneAPI HPC Toolkit and MPI Library installations (Intel Advisory).

The vulnerability requires high privileges and adjacent network access for exploitation. No public exploits or active exploitation in the wild have been reported at the time of disclosure (NVD).

Intel has released security updates to address this vulnerability. Users should upgrade to Intel oneAPI HPC Toolkit version 2023.1 or later, and Intel MPI Library version 2021.9 or later (Intel Advisory).