PT-2020-1654 · Intel+6 · Intel Processors+6

Sanjeev Das + 3 · Published 2020-01-09 · Updated 2024-06-15 · CVE-2019-14615

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Processors with Intel Processor Graphics (affected versions not specified)

Description The issue is related to insufficient control flow in certain data structures for Intel Processors with Intel Processor Graphics, which may allow an unauthenticated user to potentially enable information disclosure via local access. This could allow an attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALSA-2021:4356

ALT-PU-2020-1044

ALT-PU-2020-1045

ALT-PU-2020-1047

ALT-PU-2020-1048

ALT-PU-2020-1067

ALT-PU-2020-1070

ALT-PU-2020-1078

ALT-PU-2021-1745

BDU:2020-00884

CESA-2021_4140

CESA-2021_4356

CVE-2019-14615

DLA-2114-1

MGASA-2020-0041

MGASA-2020-0089

OPENSUSE-SU-2020:0336-1

OPENSUSE-SU-2020_0336-1

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

RHSA-2021:4140

RHSA-2021:4356

RHSA-2021_4140

RHSA-2021_4356

SUSE-SU-2020:0511-1

SUSE-SU-2020:0558-1

SUSE-SU-2020:0559-1

SUSE-SU-2020:0560-1

SUSE-SU-2020:0580-1

SUSE-SU-2020:0584-1

SUSE-SU-2020:0599-1

SUSE-SU-2020:0605-1

SUSE-SU-2020:0613-1

SUSE-SU-2020:1255-1

SUSE-SU-2020:1275-1

SUSE-SU-2020:1663-1

SUSE-SU-2020_1663-1

USN-4253-1

USN-4253-2

USN-4254-1

USN-4254-2

USN-4255-1

USN-4255-2

USN-4284-1

USN-4285-1

USN-4286-1

USN-4286-2

USN-4287-1

USN-4287-2

Affected Products

Alt Linux

Almalinux

Centos

Intel Processors

Red Hat

Suse

Ubuntu

References · 937

• 🔥 https://github.com/HE-Wenjian/iGPU-Leak · Exploit
• https://ubuntu.com/security/CVE-2019-19227 · Vendor Advisory
• https://usn.ubuntu.com/4287-1 · Vendor Advisory
• https://usn.ubuntu.com/4255-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0560-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-17351 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4284-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14615 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19241 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19082 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-14615 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1663-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19077 · Vendor Advisory
• https://usn.ubuntu.com/4254-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0599-1 · Vendor Advisory