PT-2020-5636 · Intel · Intel Driver & Support Assistant

Andrew Hess + 1 · Published 2020-04-14 · Updated 2020-04-23 · CVE-2020-0568

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 20.1.5

Description The issue is caused by a race condition error when using a shared resource, potentially allowing an attacker to cause a denial of service. This can be exploited by an authenticated user via local access.

Recommendations For versions prior to 20.1.5, update to version 20.1.5 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Intel Driver and Support Assistant until a patch is applied.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2021-01336

CVE-2020-0568

Affected Products

Intel Driver & Support Assistant

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-0568 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0568 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01336 · Security Note
• https://t.me/cvenotify/2804 · Telegram Post
• https://t.me/cibsecurity/11282 · Telegram Post