PT-2019-1745 · Intel · Intel Celeron+2

Published 2019-03-12 · Updated 2019-04-03 · CVE-2018-12201

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel Core versions 7th Generation through 8th Generation Intel Pentium versions J5005 through Silver J5005 Intel Pentium versions N5000 Intel Celeron versions J4005 through J4105 Intel Celeron versions N4000 through N4100

Description The issue is caused by a buffer overflow in the memory of the Platform Sample/Silicon Reference firmware for Intel processors. This could allow an attacker to execute arbitrary code. The vulnerability can be exploited locally.

Recommendations For Intel Core 7th Generation and 8th Generation, update the firmware to prevent buffer overflow exploitation. For Intel Pentium Silver J5005 and N5000, restrict local access to prevent potential code execution. For Intel Celeron J4005, J4105, N4000, and N4100, consider disabling vulnerable functions until a patch is available. As a temporary workaround, restrict access to the firmware to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2019-01384

CVE-2018-12201

Affected Products

Intel Celeron

Intel Core

Intel Pentium

References · 9

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12201 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-12201 · Security Note
• https://bdu.fstec.ru/vul/2019-01384 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-12201 · Security Note
• https://ubuntu.com/security/CVE-2018-12201 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00191.html · Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us · Note
• https://security.netapp.com/advisory/ntap-20190318-0002 · Note