Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.2

Intel VTune Profiler Denial of Service via Local Access

CVE-2024-37027 · published 1 year ago
Summary

Intel VTune Profiler versions before 2024.2.0 have a security issue that could allow someone with access to your computer to crash the software and make it unavailable. This is a problem because it could disrupt your work. To fix it, update to version 2024.2.0 or later.

What to do
  • Update intel oneapi_base_toolkit to version 2024.2 or later.
  • Update intel system_bring-up_toolkit to version 2024.2.0 or later.
  • Update intel vtune_profiler to version 2024.2 or later.
Affected software
VendorProductAffected versions
intel oneapi_base_toolkit < 2024.2
cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*
intel system_bring-up_toolkit < 2024.2.0
cpe:2.3:a:intel:system_bring-up_toolkit:*:*:*:*:*:*:*:*
intel vtune_profiler < 2024.2
cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:*:*:*
Original advisory text
Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access.
Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.2 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published13 Nov 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-37027 · NVD
Track software like this
Free during beta