PT-2020-4003 · Intel · Intel Graphics Drivers

Published 2020-03-10 · Updated 2022-01-01 · CVE-2020-0517

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Intel(R) Graphics Drivers versions prior to 15.36.38.5117

Description: The issue is related to an out-of-bounds write in the Intel Graphics Driver, which may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access. This can be exploited by a local attacker to gain elevated privileges or cause a denial of service.

Recommendations: For versions prior to 15.36.38.5117, update to version 15.36.38.5117 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2020-04400

CVE-2020-0517

Affected Products

Intel Graphics Drivers

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-0517 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0517 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04400 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html · Vendor Advisory
• https://t.me/cvenotify/1600 · Telegram Post
• https://security.netapp.com/advisory/ntap-20200320-0003 · Note