PT-2018-3844 · Gigabyte · Xtreme Gaming Engine+3

Publicado 2018-12-21 · Atualizado 2025-03-14 · CVE-2018-19323

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GIGABYTE APP Center versions 1.05.21 and earlier AORUS GRAPHICS ENGINE versions before 1.57 XTREME GAMING ENGINE versions before 1.26 OC GURU II version 2.08

Description The issue is related to the GDrv low-level driver, which exposes functionality to read and write Machine Specific Registers (MSRs). This is due to insufficient access control, allowing an attacker to potentially execute arbitrary code.

Recommendations For GIGABYTE APP Center versions 1.05.21 and earlier, update to a version later than 1.05.21. For AORUS GRAPHICS ENGINE versions before 1.57, update to version 1.57 or later. For XTREME GAMING ENGINE versions before 1.26, update to version 1.26 or later. For OC GURU II version 2.08, update to a version later than 2.08.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2022-06641

CVE-2018-19323

Produtos afetados

Aorus Graphics Engine

Gigabyte App Center

Oc Guru Ii

Xtreme Gaming Engine

Referências · 14

• 🔥 http://seclists.org/fulldisclosure/2018/Dec/39 · Exploit
• 🔥 https://secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities · Exploit
• https://gigabyte.com/Support/Utility/Motherboard · Nota
• https://osv.dev/vulnerability/CVE-2018-19323 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19323 · Nota de Segurança
• https://t.me/cvenotify/114827 · Publicação no Telegram
• https://gigabyte.com/Support/Security/1801 · Aviso do Fabricante, Nota de Segurança
• https://gigabyte.com/Support/Utility/Graphics-Card · Nota
• https://t.me/aptreports/14500 · Publicação no Telegram
• http://securityfocus.com/bid/106252 · Nota
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-19323 · Nota
• https://bdu.fstec.ru/vul/2022-06641 · Nota de Segurança
• https://gigabyte.com/tw/Support/Utility/Graphics-Card · Nota
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota