PT-2019-2352 · Intel · Intel Graphics Driver

Published 2019-05-14 · Updated 2019-05-21 · CVE-2019-0115

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Driver versions prior to 10.18.14.5067 (aka 15.36.x.5067) Intel Graphics Driver versions prior to 10.18.10.5069 (aka 15.33.x.5069)

Description The issue is related to insufficient input validation in the KMD module of the Intel Graphics Driver, which may allow an authenticated user to potentially enable denial of service via local access. This could be exploited to cause a disruption in service.

Recommendations For versions prior to 10.18.14.5067 (aka 15.36.x.5067), update to version 10.18.14.5067 or later. For versions prior to 10.18.10.5069 (aka 15.33.x.5069), update to version 10.18.10.5069 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-02127

CVE-2019-0115

Affected Products

Intel Graphics Driver

References · 6

• https://osv.dev/vulnerability/CVE-2019-0115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0115 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00218.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02127 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00218.html · Note
• http://securityfocus.com/bid/108385 · Note