PT-2019-2352 · Intel · Intel Graphics Driver

Publicado 2019-05-14 · Atualizado 2019-05-21 · CVE-2019-0115

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Driver versions prior to 10.18.14.5067 (aka 15.36.x.5067) Intel Graphics Driver versions prior to 10.18.10.5069 (aka 15.33.x.5069)

Description The issue is related to insufficient input validation in the KMD module of the Intel Graphics Driver, which may allow an authenticated user to potentially enable denial of service via local access. This could be exploited to cause a disruption in service.

Recommendations For versions prior to 10.18.14.5067 (aka 15.36.x.5067), update to version 10.18.14.5067 or later. For versions prior to 10.18.10.5069 (aka 15.33.x.5069), update to version 10.18.10.5069 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-02127

CVE-2019-0115

Produtos afetados

Intel Graphics Driver

Referências · 6

• https://osv.dev/vulnerability/CVE-2019-0115 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0115 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00218.html · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00218.html · Nota
• http://securityfocus.com/bid/108385 · Nota
• https://bdu.fstec.ru/vul/2019-02127 · Nota de Segurança